VULNERABILITY INTELLIGENCE

CVE-2024-36071

CVSS score6.3 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2024-06-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path.

Weakness classification

  • CWE-426: Untrusted Search Path

Primary references