Skip to content
OpenAdvisories
High · 7.8 CVE-2023-3514 EUVD-2023-44173GHSA-73pr-w8f4-pxm7

RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability

Published Jul 14, 2023 · Updated Nov 5, 2024 · Assigned by STAR_Labs

Description

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file.

Affected products

VendorProductAffectedFixed
Razer Razer Central ≤ 7.11.0.558 —

References