CVE-2024-36071

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path.

Score

CVSS 3.1 6.3 Medium

Status

Analyzed - cve@mitre.org

Published

2024-06-20

Last modified

2024-08-02

Weaknesses

CWE-426

Affected products

• Magician (Samsung)

References

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/