CVE-2023-31461
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-31461 is a newly identified vulnerability affecting SteelSeries GG software version 36.0.0. This issue allows attackers to create a sub-application through an open API listener, which can be executed automatically from a controlled location due to a path traversal vulnerability. An attacker can exploit this flaw to gain unauthorized access and potentially run malicious code on the victim's system. The vulnerability poses a significant risk and requires immediate remediation by SteelSeries to prevent potential exploitation. Users are advised to update their SteelSeries GG software to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SteelSeries GG
Affected Vendors
- SteelSeries
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions