Lucene search
STAR_LabsCVELIST:CVE-2023-3513HistoryJul 14, 2023 - 4:49 a.m.
CVE-2023-3513 RazerCentralService Unsafe Deserialization Escalation of Privilege
2023-07-1404:49:59
CWE-269
CWE-502
STAR_Labs
www.cve.org
2
razercentralservice
privilegecontrol
vulnerability
unsafedeserialization
escalationofprivilege
namedpipe
windows
maliciousactor
localaccess
systemprivilege
.net
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
14.1%
Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.
CNA Affected
[
{
"defaultStatus": "unaffected",
"modules": [
"RazerCentralSerivce"
],
"platforms": [
"Windows"
],
"product": "Razer Central",
"vendor": "Razer",
"versions": [
{
"lessThanOrEqual": "7.11.0.558",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Deserialization of untrusted data
2023-07-14 05:15:00
cve
cve
CVE-2023-3513
2023-07-14 05:15:09
nvd
nvd
CVE-2023-3513
2023-07-14 05:15:09
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
14.1%
Related for CVELIST:CVE-2023-3513