Vulnerability Details CVE-2020-16602
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.067
EPSS Ranking 90.9%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 6.8
References
- http://packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.html
- https://assets.razerzone.com/dev_portal/REST/html/index.html
- https://www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.html
- https://www.youtube.com/watch?v=fkESBVhIdIA
- http://packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.html
- https://assets.razerzone.com/dev_portal/REST/html/index.html
- https://www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.html
- https://www.youtube.com/watch?v=fkESBVhIdIA
Products affected by CVE-2020-16602
-
cpe:2.3:a:razer:chroma_sdk:-
-
cpe:2.3:a:razer:chroma_sdk:1.0.4
-
cpe:2.3:a:razer:chroma_sdk:1.1.5
-
cpe:2.3:a:razer:chroma_sdk:1.10.2
-
cpe:2.3:a:razer:chroma_sdk:1.10.6
-
cpe:2.3:a:razer:chroma_sdk:1.13.6
-
cpe:2.3:a:razer:chroma_sdk:1.14.2
-
cpe:2.3:a:razer:chroma_sdk:1.2.4
-
cpe:2.3:a:razer:chroma_sdk:1.3
-
cpe:2.3:a:razer:chroma_sdk:1.4.1
-
cpe:2.3:a:razer:chroma_sdk:1.6.2
-
cpe:2.3:a:razer:chroma_sdk:1.7.2
-
cpe:2.3:a:razer:chroma_sdk:1.7.5
-
cpe:2.3:a:razer:chroma_sdk:1.7.8
-
cpe:2.3:a:razer:chroma_sdk:1.8.11
-
cpe:2.3:a:razer:chroma_sdk:1.8.8
-
cpe:2.3:a:razer:chroma_sdk:1.9.6
-
cpe:2.3:a:razer:chroma_sdk:2.1.3
-
cpe:2.3:a:razer:chroma_sdk:2.1.5
-
cpe:2.3:a:razer:chroma_sdk:2.3.6
-
cpe:2.3:a:razer:chroma_sdk:2.4.0
-
cpe:2.3:a:razer:chroma_sdk:2.4.1
-
cpe:2.3:a:razer:chroma_sdk:2.5.3
-
cpe:2.3:a:razer:chroma_sdk:2.6.4
-
cpe:2.3:a:razer:chroma_sdk:2.7.2
-
cpe:2.3:a:razer:chroma_sdk:2.7.4
-
cpe:2.3:a:razer:chroma_sdk:2.7.5
-
cpe:2.3:a:razer:chroma_sdk:2.8.5
-
cpe:2.3:a:razer:chroma_sdk:2.8.6
-
cpe:2.3:a:razer:chroma_sdk:3.00
-
cpe:2.3:a:razer:chroma_sdk:3.03
-
cpe:2.3:a:razer:chroma_sdk:3.04
-
cpe:2.3:a:razer:chroma_sdk:3.05
-
cpe:2.3:a:razer:chroma_sdk:3.07
-
cpe:2.3:a:razer:chroma_sdk:3.10.8
-
cpe:2.3:a:razer:chroma_sdk:3.11.11
-
cpe:2.3:a:razer:chroma_sdk:3.12.10
-
cpe:2.3:a:razer:chroma_sdk:3.12.15
-
cpe:2.3:a:razer:chroma_sdk:3.12.17
-
cpe:2.3:a:razer:chroma_sdk:3.8.6
-
cpe:2.3:a:razer:chroma_sdk:3.9.6