Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling โAddModuleโ or โUninstallModulesโ command to execute arbitrary executable file.
CPE | Name | Operator | Version |
---|---|---|---|
razer_central | le | 7.11.0.558 |