CVE-2023-3513
RazerCentralService Unsafe Deserialization Escalation of Privilege
HIGH 7.8EPSS 0.3%
Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.
- Affected
- Razer · Razer Central
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.34% chance of exploitation in the next 30 days, 26th percentile
- Published
- 2023-07-14
- Updated
- 2024-10-31