cve/2023/CVE-2023-3514.md

CVE-2023-3514

Description

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to execute arbitrary executable file.

POC

Reference

• https://starlabs.sg/advisories/23/23-3514/

Github

• https://github.com/star-sg/CVE