[Software] Samsung Magician Software updated after ‘high severity’ security vulnerability found

[GL HERO SHIMA]

Samsung has issued an update to its Magician Software for Windows after a “high severity” vulnerability was found (h/t ComputerBase). The Samsung Magician Software is the firm’s feature-packed storage management utility, but version 8.0.0 is now known to be affected by CVE-2024-23769. Samsung released version 8.0.1 of this utility for PC users, fixing the vulnerability.

The vulnerability with identifier CVE-2024-23769 has a CVE score of 7.3 and is thus classified as a high-severity security issue. According to Samsung, the vulnerability was first reported back on October 30 last year, and it credits Masahiro Iida for reporting the issue.

In typical technical terms, Samsung and NIST describe the vulnerability as allowing “improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 (for Windows) allows a local attacker to read privileged data.”

https://www.tomshardware.com/pc-components/ssds/samsung-magician-software-updated-after-high-severity-security-vulnerability-found