CVE-2024-45752 Privilege escalation in n/a
Unprivileged users can configure the logid daemon via D-Bus to set malicious keyboard macros, leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-45752?
CVE-2024-45752 is a high-severity vulnerability in n/a, published on 19 Sep 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
logiops through 0.3.4, in its default configuration, allows any unprivileged user to configure its logid daemon via an unrestricted D-Bus service, including setting malicious keyboard macros. This allows for privilege escalation with minimal user interaction.
Weakness: CWE-269
Which versions are affected by CVE-2024-45752?
It affects 1 product.
Products include Pixlone Logiops.
How do I fix CVE-2024-45752?
Upgrade to a fixed version.
Is CVE-2024-45752 being exploited?
There is no known exploitation of CVE-2024-45752 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2024-45752, GHSA-6ffr-69v4-q8xm, UBUNTU-CVE-2024-45752.