Razer Chroma SDK Rest Server up to 3.12.17 Apps race condition

Summaryinfo

A vulnerability was found in Razer Chroma SDK Rest Server up to 3.12.17. It has been rated as critical. This issue affects some unknown processing of the file %PROGRAMDATA%\Razer Chroma\SDK\Apps. This manipulation causes race condition. This vulnerability is registered as CVE-2020-16602. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Detailsinfo

A vulnerability classified as critical was found in Razer Chroma SDK Rest Server up to 3.12.17. Affected by this vulnerability is an unknown function of the file %PROGRAMDATA%\Razer Chroma\SDK\Apps. The manipulation with an unknown input leads to a race condition vulnerability. The CWE definition for the vulnerability is CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.

The weakness was published 09/02/2020. This vulnerability is known as CVE-2020-16602 since 08/04/2020. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details and also a public exploit are known.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (49106). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Razer

Name

• Chroma SDK Rest Server

Version

• 3.12.0
• 3.12.1
• 3.12.2
• 3.12.3
• 3.12.4
• 3.12.5
• 3.12.6
• 3.12.7
• 3.12.8
• 3.12.9
• 3.12.10
• 3.12.11
• 3.12.12
• 3.12.13
• 3.12.14
• 3.12.15
• 3.12.16
• 3.12.17

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion