CVE-2023-31462: High severity steelseries gg vulnerability
Published Jul 20, 2023
·Updated
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.
Affected Software
1 affected component
SteelSeries GG=36.0.0
Event History
Jul 20, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
06:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-31462?
CVE-2023-31462 has a high severity rating due to its potential for privilege escalation.
2
How do I fix CVE-2023-31462?
To mitigate CVE-2023-31462, users should update SteelSeries GG to the latest version available.
3
What types of attacks are possible with CVE-2023-31462?
CVE-2023-31462 allows attackers to modify values in an unencrypted database, leading to unauthorized code execution.
4
Who is affected by CVE-2023-31462?
Any user running SteelSeries GG version 36.0.0 is vulnerable to CVE-2023-31462.
5
Is CVE-2023-31462 exploitable remotely?
CVE-2023-31462 requires local access to exploit, meaning it is not exploitable remotely.