VULNERABILITY INTELLIGENCE

CVE-2024-8258

CVSS score7.8 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2024-09-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Improper Control of Generation of Code ('Code Injection') in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration.

Weakness classification

  • cve-coordination@logitech.com: CWE-94
  • nvd@nist.gov: CWE-94

Primary references