Description
Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Razer | Razer Central | ≤ 7.11.0.558 | — |
References
- https://starlabs.sg/advisories/23/23-3513/ third-party-advisory