CVE-2023-3513

HighCVSS 7.8

Published: 14/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

24th percentile - higher than 24% of all known CVEs

Summary

Improper Privilege Control in RazerCentralService in RazerCentral versions <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.

Risk Assessment

The risk involves the potential for an attacker to gain full system privileges, which could lead to serious security breaches and data loss.

Recommendation

It is recommended to update RazerCentral to the latest version to mitigate this vulnerability and to monitor system access for potential attack attempts.

Other vulnerabilities in RazerCentralService

CVE-2023-3514High
Improper Privilege Control in RazerCentralService in RazerCentral <=7.11.0.558 on Windows allows a local malicious actor to gain SYSTEM privilege by communicating with the named pipe as a low-privilege user and calling 'AddModule' or 'UninstallModules' command to execute arbitrary executable file.

Original NVD description (English source)

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS