What is CVE-2024-45407?

CVE-2024-45407 is a medium-severity vulnerability in Lizardbyte Sunshine, classified under Channel Accessible by Non-Endpoint. CVSS score: 6.5/10. Published 2024-09-10.

How severe is CVE-2024-45407?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2024-45407 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Lizardbyte Sunshine

CVE-2024-45407

Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client rather than failing authentication due to a PIN validation er…

EPSS: 0.004 (58.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Lizardbyte Sunshine — versions >= 5fcd07ecb1428bfe245ad6fa349aead476c7e772, < fd7e68457a134102d1b30af5796c79f2aa623224

Weakness classification (CWE)

CWE-300 — Channel Accessible by Non-Endpoint

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

https://github.com/LizardByte/Sunshine/security/advisories/GHSA-jqph-8cp5-g874 (x_refsource_CONFIRM)
https://github.com/LizardByte/Sunshine/commit/5fcd07ecb1428bfe245ad6fa349aead476c7e772 (x_refsource_MISC)
https://github.com/LizardByte/Sunshine/commit/fd7e68457a134102d1b30af5796c79f2aa623224 (x_refsource_MISC)

Frequently asked questions

What is CVE-2024-45407?: CVE-2024-45407 is a medium-severity vulnerability in Lizardbyte Sunshine, classified under Channel Accessible by Non-Endpoint. CVSS score: 6.5/10. Published 2024-09-10.
How severe is CVE-2024-45407?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2024-45407 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.