Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-3513

RazerCentralService Unsafe Deserialization Escalation of Privilege

Description

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Razer Razer Central

Default version status: unaffected

  • 0 to ≤ 7.11.0.558affected

References