What is CVE-2024-57276?

CVE-2024-57276 is a high-severity vulnerability in N/a, classified under Unquoted Search Path or Element. CVSS score: 7.3/10. Published 2025-01-27.

How severe is CVE-2024-57276?

High severity. CVSS v3 base score is 7.3 out of 10.

Is CVE-2024-57276 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2024-57276

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges, enabling attackers to escalate privileges by replacing or placing a malicious executable in the service path.

EPSS: 0.002 (6.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

Public proof-of-concept exploits

yamerooo123/yamerooo123

References

Frequently asked questions

What is CVE-2024-57276?: CVE-2024-57276 is a high-severity vulnerability in N/a, classified under Unquoted Search Path or Element. CVSS score: 7.3/10. Published 2025-01-27.
How severe is CVE-2024-57276?: High severity. CVSS v3 base score is 7.3 out of 10.
Is CVE-2024-57276 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.