Privilege Escalation in Razer Synapse 3 Software by Razer
CVE-2021-30494

5.5MEDIUM

Key Information:

Vendor

Razer

Status
Synapse
Vendor
CVE Published:
14 April 2021

What is CVE-2021-30494?

Razer Synapse 3 software contains vulnerabilities linked to its system services that execute privileged operations on the Razer Chroma SDK subkey. These vulnerabilities allow attackers to manipulate log files and potentially write to unintended directories, which could lead to unauthorized access or further exploitation of the system. Users of Razer Synapse 3 should be aware of these risks and apply any available patches to enhance their security.

References

https://versprite.com/security-resources/
x_refsource_MISC
https://versprite.com/blog/security-research/razer-synaps...
x_refsource_MISC
https://versprite.com/advisories/razer-synapse-3-1/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.