CVE-2024-57276
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Jan 27, 2025
Updated: Jan 30, 2025
CWE ID 428
Summary
CVE-2024-57276 is a vulnerability affecting the Electronic Arts Dragon Age Origins 1.05 game. The issue lies in the DAUpdaterSVC service, which includes an unquoted service path. With insecure permissions, users can modify the executable file path utilized by the service. Since the service operates with NT AUTHORITY\\SYSTEM privileges, attackers can escalate privileges by swapping out or introducing malicious executables in the service path.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share