← CVE Intelligence

CVE-2023-3513

RazerCentralService Unsafe Deserialization Escalation of Privilege PUBLISHED

Description (CNA)

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.

Affected (CNA)

Vendor / productVersions
Razer / Razer Centralaffected 0 through 7.11.0.558

CWE

CWE-269, CWE-502

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.