CVE-2024-8258: Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS
Published Sep 10, 2024
·Updated
Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.
Affected Software
2 affected components
All of the following
Logitech Logi Options\+>=1.60.496306<1.70.551909
Apple macOS
Remediation
Information
Update to Logitech Options Plus version 1.70 or later.
Event History
Sep 10, 2024
CVE Published
via MITRE·08:36 AM
Data Sourced
via MITRE·08:36 AM
RemedyDescriptionWeakness
Jul 4, 56726
Event
via FIRST·01:17 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-8258?
CVE-2024-8258 is considered a high severity vulnerability due to its potential to allow attackers to execute arbitrary code.
2
How do I fix CVE-2024-8258?
To fix CVE-2024-8258, ensure you update Logitech Options Plus to the latest version that is beyond 1.70.551909.
3
Which versions of Logitech Options Plus are affected by CVE-2024-8258?
CVE-2024-8258 affects Logitech Options Plus versions from 1.60.496306 up to 1.70.551909.
4
On which operating system is CVE-2024-8258 exploitable?
CVE-2024-8258 is exploitable on macOS systems where Logitech Options Plus is installed.
5
What type of vulnerability is CVE-2024-8258 classified as?
CVE-2024-8258 is classified as an improper control of generation of code vulnerability, specifically a code injection risk.