CVE-2017-9769
CRITICALRazer Synapse <2.20.15.1104 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2017-9769.
PoCs published by Metasploit, kkent030315, including Metasploit module exploits/windows/local/razer_zwopenprocess.
AI-analyzed exploit summary This Metasploit module exploits CVE-2017-9769, a local privilege escalation vulnerability in Razer Synapse's rzpnk.sys driver. It leverages an IOCTL handler flaw to open a handle to winlogon.exe and inject shellcode, achieving SYSTEM privileges.
Description
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.
Exploits (3)
This Metasploit module exploits CVE-2017-9769, a local privilege escalation vulnerability in Razer Synapse's rzpnk.sys driver. It leverages an IOCTL handler flaw to open a handle to winlogon.exe and inject shellcode, achieving SYSTEM privileges.
This repository contains a proof-of-concept exploit for CVE-2017-9769, which leverages a vulnerable IOCTL in the Razer Synapse driver (rzpnk.sys) to open a handle to an arbitrary process via ZwOpenProcess. The exploit demonstrates privilege escalation by obtaining a handle to the current process with elevated permissions.
This Metasploit module exploits a vulnerability in the Razer Synapse driver (rzpnk.sys) by leveraging an IOCTL handler that allows arbitrary process handle opening. It escalates privileges to SYSTEM by injecting shellcode into the winlogon process and triggering execution via LockWorkStation.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H