Razer to fix bug gives users admin rights on Windows via installer
A flaw in the Razer software installer allows users to get administrative privileges on Windows 10 or Windows 11 by connecting Razer hardware and clicking through to a Powershell, the installer will be fixed by Razer.
According to security researcher John Hat, the remedy should be implemented "as soon as possible." He spotted the bug and, after receiving no reaction, he decided to make his discoveries public by posting them on Twitter and making a video last weekend. Razer intends to do something with his report now that it has been brought to the attention of the public.
In a video, Hat demonstrated how the vulnerability works. When you connect a Razer mouse or keyboard to a Windows 10 or 11 computer, Windows will immediately download and install a driver for the hardware from Windows Update, and then launch an installer for the associated Razer software. This provides the option of installing the software in a folder of one's choosing. Afterwards, it is possible to start Powershell from that folder, in which case Powershell is granted the permissions of the folder from which it was launched. It is possible to do anything with those administrative privileges from that point on. Physical access to a computer, as well as the ability to plug in or emulate Razer gear, are required for the hack to work. As a result, the scope on which this can be exploited is limited as a result.
Check the exploit video here.
ASRock teams up with Razer to bring you X570 and B550 Taichi Razer Edition Motherboards - 11/30/2020 04:59 PM
ASRock announced a new partnership with Razer to develop the ASRock Taichi Razer Edition line of motherboards, the world's first motherboard that is natively integrated with Razer Chroma RGB lighting...
Razer To Launch Expansion Gaming Peripherals at RazerCon 2020 - 10/13/2020 09:00 AM
Razer, the leading global lifestyle brand for gamers, made October 10, 2020 a day to remember for the global gaming community....
Razer Tomahawk PC Gaming Chassis - 01/08/2019 07:22 PM
Razer announced today the latest entry to the Designed by Razer Case program – The Lian Li O11 Dynamic. Additionally, it introduced two mid-tower PC gaming chassis developed in-house &nd...
Razer to release the Panthera Evo evolution of the Arcade Stick - 08/07/2018 08:38 AM
Razer unveiled Razer Panthera Evo to further support the fighting game community and improve their line of high quality arcade-style controllers. The Razer Panthera Evo is an evolution of the best-sel...
Antec and Razer to Offer Mini-ITX Gaming Chassis - 09/05/2016 08:50 AM
The Antec Cube-Designed by Razer combines the e-sports design elements of Razer, with the reliability and build quality of Antec, into a small form factor case for gamers....
Senior Member
Posts: 1456
Joined: 2005-05-04
I have Razer Viper Ultimate mouse and the POS Razer software sometimes freeze all keyboard and mouse input LMAO. It happened in game and I couldn't do anything but the game still run fine, uninstalled the software and everything works fine.
Senior Member
Posts: 108
Joined: 2019-06-08
Sloppy
Senior Member
Posts: 107
Joined: 2010-06-18
Don't exactly like giving admin privileges to programs (incl. games) as well.