CVE-2023-3514

HIGH

RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-3514 has a selected CVSS score of 7.8 (high); EIP currently links 1 curated repository PoC.

Description

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file.

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 5, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Razer Central

Browse Razer / Razer Central

Default status: unaffected

CVE ListThrough 7.11.0.558affected

Proofs of concept

1

Curated repository PoCs

GitHubCVE-2023-3514Curated repository PoCby star-sg318Not analyzed1 file

C · 13.0 KiB

GitHub
PoC details

References

2