CVE-2024-36071 - Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process

Back Back to CVE browser

MEDIUM

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process

Published Jun 20, 2024

6.3

MEDIUM

CVSS 3.1

EPSS 0.14%

Description

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path.

Affected products

Vendor Samsung Product Magician Default
n/a
- Version
  8.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Samsung

Magician

n/a

Version	Status	Constraints
8.0.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-35870
Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-35870		Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/		Vendor Advisory