CVE-2024-5290

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 7, 2024
Updated: Sep 17, 2024
CWE ID 427

Summary

CVE-2024-5290 is a vulnerability affecting Ubuntu's wpa_supplicant software. An attacker with local access, either as a member of the netdev group or via the dbus interface, can trick wpa_supplicant into loading an arbitrary shared object. This allows the attacker to escalate privileges, potentially gaining root access. The vulnerability could lead to significant security risks if exploited.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share