CVE-2023-3514
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Improper Privilege Control in RazerCentralService in RazerCentral <=7.11.0.558 on Windows allows a local malicious actor to gain SYSTEM privilege by communicating with the named pipe as a low-privilege user and calling 'AddModule' or 'UninstallModules' command to execute arbitrary executable file.
Risk Assessment
A local attacker can gain full system privileges, posing a serious threat to the integrity and confidentiality of data within the organization.
Recommendation
It is recommended to update RazerCentral to the latest version to mitigate this vulnerability and to restrict system access to trusted users.
Other vulnerabilities in RazerCentralService
Original NVD description (English source)
Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS