CVE-2022-46338

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugs.debian.org/1024998Issue Tracking, Third Party Advisory
https://github.com/MatMoul/g810-led/pull/297Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00002.htmlMailing List, Third Party Advisory
https://bugs.debian.org/1024998Issue Tracking, Third Party Advisory
https://github.com/MatMoul/g810-led/pull/297Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00002.htmlMailing List, Third Party Advisory

Timeline

Published: Nov 30, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-46347.8All versions prior to Delta Electronic’s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-CVE-2022-463408.8A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension CVE-2022-463418.8A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds mem CVE-2022-463428.8A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory CVE-2022-463438.8A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memo CVE-2022-463448.8A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation i CVE-2022-463457.8A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34 CVE-2022-463467.8A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34 CVE-2022-463477.8A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34 CVE-2022-463487.8A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34 CVE-2022-463497.8A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34 CVE-2022-463506.1A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALA