1. Home
  2. CVE Database
  3. CVE-2022-0916
HIGH · 8.4

CVE-2022-0916

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization opera...

Vulnerability Description

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
LogitechOptions< 9.60.87

Related Weaknesses (CWE)

CWE-287CWE-352

References

FAQ

What is CVE-2022-0916?

CVE-2022-0916 is a vulnerability with a CVSS score of 8.4 (HIGH). An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization opera...

How severe is CVE-2022-0916?

CVE-2022-0916 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-0916?

Check the references section above for vendor advisories and patch information. Affected products include: Logitech Options.