CVE-2020-16602

Katalog CVE

CVSS 8.1 · High EPSS 6,0%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada razer chroma sdk. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.

Rincian

Terbit di NVD

2 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

6,0% peluang dieksploitasi; lebih tinggi dari 93,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://assets.razerzone.com/dev_portal/REST/html/index.html advisory vendor
• http://packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.html exploit · advisory pihak ketiga · vdb entry
• https://www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.html advisory pihak ketiga
• https://www.youtube.com/watch?v=fkESBVhIdIA advisory pihak ketiga