Usbview vulnerabilities
1 known vulnerability in Usbview from Usbview Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest first
- 7.8 High severity
Usbview: Missing Authentication for Critical Functionality
USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because certain Polkit settings (e.g., allow_any=yes) for pkexec disable the authentication requirement. Code execution can, for example, use the --