CVE-2024-22002

EUVD-2024-19608
CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
corsairicue
5.9.105
ADP
Common Weakness Enumeration
References
https://github.com/0xkickit/iCUE_DllHijack_LPE-CVE-2024-22002
https://twitter.com/0xkickit
https://github.com/0xkickit/iCUE_DllHijack_LPE-CVE-2024-22002
https://twitter.com/0xkickit