{"id":"CVE-2024-36071","state":"PUBLISHED","title":"Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of ","description":"Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path.","publishedAt":"2024-06-20T00:00:00.000Z","updatedAt":"2024-08-02T03:30:13.006Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:R","source":"mitre"},"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://semiconductor.samsung.com/support/quality-support/product-security-updates/"],"weaknesses":["CWE-426"],"ingestedAt":"2026-10-29T20:07:30.303Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/36xxx/CVE-2024-36071.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-36071","state":"PUBLISHED","datePublished":"2024-06-20T00:00:00.000Z","dateUpdated":"2024-08-02T03:30:13.006Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2024-05-19T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:R","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":6.3,"baseSeverity":"MEDIUM"}}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2024-06-20T20:47:15.997Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"samsung","product":"magician","defaultStatus":"unknown","versions":[{"version":"8.0.0","status":"affected"}],"cpes":["cpe:2.3:a:samsung:magician:8.0.0:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-24T15:28:57.237683Z","id":"CVE-2024-36071","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-426","type":"CWE","lang":"en","description":"CWE-426 Untrusted Search Path"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-24T15:31:38.045Z"}},{"title":"CVE Program Container","references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T03:30:13.006Z"}}]}}}