CVE-2024-2537 - CVE House

Status published Medium CVE-2024-2537

Electron Code Injection in Logi Tune macOS Application

4.4 CVSS

Vulnerability Description

Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-2537

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Fatih ERDOGAN (ferdogan)

References

https://hackerone.com/reports/2376663

More from Logitech

View All →

CVE-2024-8258

Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS

Low 2

CVE-2024-8011

Logitech Options+ on MacOS prior 1.72 allows a local attacker...

Low 2

CVE-2024-4031

MEVO WEBCAM APP Windows Unquoted Service Path Vulnerability

Medium 4.4

CVE-2022-0916

Broken authentication on Logitech Options due to misvalidation of Oauth state parameter

High 8.4

CVE-2022-0915

Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation

Medium 6

Affected Vendor

Logitech

View all reports →

Affected Software

Logi Tune

Vulnerable Versions:

3.5.249

Timeline

Official Publish: March 15th, 2024

Last Modified: August 1st, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-913

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.