CVE-2021-44226
Razer Synapse Race Condition / DLL Hijacking
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
6Exploited in Wild
-Decision
Descriptions
Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROGRAMDATA%\Razer has been created by any unprivileged user before Synapse is installed. The unprivileged user may have placed Trojan horse DLLs there.
Razer Synapse versiones anteriores a 3.7.0228.022817, permite una escalada de privilegios porque es basado en %PROGRAMDATA%\Razer\Synapse3\Service\bin incluso si %PROGRAMDATA%\Razer ha sido creado por cualquier usuario no privilegiado antes de la instalación de Synapse. El usuario no privilegiado puede haber colocado allí DLLs troyanos
Razer Synapse versions before 3.8.0428.042117 (20230601) suffer from multiple vulnerabilities. Due to an unsafe installation path, improper privilege management, and a time-of-check time-of-use race condition, the associated system service "Razer Synapse Service" is vulnerable to DLL hijacking. As a result, local Windows users can abuse the Razer driver installer to obtain administrative privileges on Windows.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-11-26 CVE Reserved
- 2022-03-23 CVE Published
- 2022-03-28 First Exploit
- 2024-08-04 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-427: Uncontrolled Search Path Element
CAPEC
References (11)
| URL | Date | SRC |
|---|---|---|
| https://packetstorm.news/files/id/174696 | 2023-09-18 | |
| https://packetstorm.news/files/id/170772 | 2023-01-27 | |
| https://packetstorm.news/files/id/166485 | 2022-03-28 | |
| http://packetstormsecurity.com/files/166485/Razer-Synapse-3.6.x-DLL-Hijacking.html | 2024-08-04 | |
| http://seclists.org/fulldisclosure/2022/Mar/51 | 2024-08-04 | |
| https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-058.txt | 2024-08-04 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.razer.com/community | 2023-09-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Razer Search vendor "Razer" | Synapse Search vendor "Razer" for product "Synapse" | < 3.7.0228.022817 Search vendor "Razer" for product "Synapse" and version " < 3.7.0228.022817" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|