← CVE Intelligence

CVE-2023-3514

RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability PUBLISHED

Description (CNA)

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file.

Affected (CNA)

Vendor / productVersions
Razer / Razer Centralaffected 0 through 7.11.0.558

CWE

CWE-269

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.