High severity7.5NVD Advisory· Published Jul 20, 2023· Updated Jun 17, 2026
CVE-2023-31461
CVE-2023-31461
Description
Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability.
Affected products
3cpe:2.3:a:steelseries:gg:36.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:steelseries:gg:36.0.0:*:*:*:*:*:*:*
- (no CPE)range: =36.0.0
- SteelSeries/GGdescription
Patches
Vulnerability mechanics
References
2- www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalationnvdExploitThird Party Advisory
- steelseries.com/ggnvdProduct
News mentions
0No linked articles in our index yet.