CVE-2021-30493

2021-04-1414:49:47

mitre

www.cve.org

razer

synapse

privilege escalation

chromabroadcast

file concatenation

directory unintended.

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

36.2%

JSON

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBroadcast subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other words, an attacker can create a file in an unintended directory (with some limitations).