CVE-2020-16602
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.99%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.
- CVSS 3.1
- 8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 5.99% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- razer/chroma sdk
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.htmlExploit, Third Party Advisory, VDB Entry
- https://assets.razerzone.com/dev_portal/REST/html/index.htmlVendor Advisory
- https://www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.htmlThird Party Advisory
- https://www.youtube.com/watch?v=fkESBVhIdIAThird Party Advisory
- http://packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.htmlExploit, Third Party Advisory, VDB Entry
- https://assets.razerzone.com/dev_portal/REST/html/index.htmlVendor Advisory
- https://www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.htmlThird Party Advisory
- https://www.youtube.com/watch?v=fkESBVhIdIAThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.