CVE-2022-0916

ALTO 8.8CVE-2022-0916 · Published 03/05/2022 · updated 17/06/2026

En resumen

CVE-2022-0916 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a options (logitech).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.45%, mayor que el 39.1% de las vulnerabilidades.
Solución: actualizar a 9.60.87 o posterior.

Package	Affected versions	Patched versions
options logitech	`< 9.60.87`	`9.60.87`

Description

An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

References

support.logi.com/hc/en-us/articles/360025297893 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free