Security Advisory

CVE-2020-16602

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-02 12:57:41
Last updated 2024-08-04 13:45:33
Assigner mitre
State PUBLISHED

Description

Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%Razer ChromaSDKApps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.