Security Advisory

CVE-2020-16602

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-09-02 12:57:41
Last updated 2024-08-04 13:45:33
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.