Vulnerability Description
Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user's consent.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| L-Is-B | Direct | <= 2.6.0 |
| Apple | Macos | - |
References
- https://jvn.jp/en/jp/JVN42691027/Third Party Advisory
- https://status.direct4b.com/2023/08/31/2023083101/Vendor Advisory
- https://jvn.jp/en/jp/JVN42691027/Third Party Advisory
- https://status.direct4b.com/2023/08/31/2023083101/Vendor Advisory
FAQ
What is CVE-2023-41775?
CVE-2023-41775 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device whe...
How severe is CVE-2023-41775?
CVE-2023-41775 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-41775?
Check the references section above for vendor advisories and patch information. Affected products include: L-Is-B Direct, Apple Macos.