CVE-2024-54229 describes an incorrect privilege assignment vulnerability in the SV100 Companion software by straightvisions GmbH, affecting versions up to and including 2.0.02. This flaw enables an attacker to escalate privileges remotely without authentication or user interaction, potentially leading to full system compromise. The CVSS 3.1 base score of 9.8 reflects the critical nature of this vulnerability with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability of the affected system. No official patch or mitigation details have been disclosed yet.

Successful exploitation of this vulnerability allows an unauthenticated attacker to escalate privileges on the affected system, potentially gaining full control. This compromises the confidentiality, integrity, and availability of the system running SV100 Companion versions up to 2.0.02. There are no known exploits in the wild currently, but the high CVSS score indicates a severe risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the SV100 Companion service and monitor for unusual activity related to privilege escalation attempts. Avoid deploying affected versions in untrusted environments.