Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Scythe Mugen 5 Rev.C CPU Cooler review
be quiet Pure Loop 2 FX 280mm LCS review
HP FX900 1 TB NVMe Review
Scythe FUMA2 Rev.B CPU Cooler review
SK Hynix Platinum P41 2TB M.2 NVMe SSD Review
Corsair K70 RGB PRO Mini Wireless review
MSI MPG A1000G - 1000W PSU Review
Goodram IRDM PRO M.2 SSD 2 TB NVMe SSD Review
Samsung T7 Shield Portable 1TB USB SSD review
DeepCool LS720 (LCS) review

New Downloads
AMD Radeon Software Adrenalin 22.8.1 driver download
Prime95 download version 30.8 build 16
Memtest86 9.5 download
Intel ARC graphics Driver Download Version: 30.0.101.1743
GeForce 516.94 WHQL driver download
Display Driver Uninstaller Download version 18.0.5.4
FurMark Download v1.31
Intel HD graphics Driver Download Version: 31.0.101.3222
AMD Radeon Software Adrenalin 22.7.1 driver download
GeForce 516.93 WHQL Studio driver download


New Forum Topics
RTX 3000 Series artifacts, black squares that flicker in desktop and 2D mode Need to match with a Q9650 @ 4.2Ghz, 1080p AMD Software: Adrenalin Edition 22.8.1- Driver download and discussion Extreme 4-Way Sli Tuning MSI MEG Ai1300P PCIE5 is ATX 3.0 Compliant PSU with 600 W PCIe Connector JPR estimates Intel GPU unit losses at $3.5 billion, suggests selling it Slow SSD write speed 3080 Owner's thread! Samsung Galaxy Z Flip4 and Galaxy Z Fold4: Starting at 1800 USD NVIDIA GeForce 516.94 WHQL driver download & Discussion




Guru3D.com » News » Razer to fix bug gives users admin rights on Windows via installer

Razer to fix bug gives users admin rights on Windows via installer

by Hilbert Hagedoorn on: 08/23/2021 08:28 AM | source: Johhn Hat (Twitter) | 3 comment(s)
Razer to fix bug gives users admin rights on Windows via installer

A flaw in the Razer software installer allows users to get administrative privileges on Windows 10 or Windows 11 by connecting Razer hardware and clicking through to a Powershell, the installer will be fixed by Razer. 

According to security researcher John Hat, the remedy should be implemented "as soon as possible." He spotted the bug and, after receiving no reaction, he decided to make his discoveries public by posting them on Twitter and making a video last weekend. Razer intends to do something with his report now that it has been brought to the attention of the public.

In a video, Hat demonstrated how the vulnerability works. When you connect a Razer mouse or keyboard to a Windows 10 or 11 computer, Windows will immediately download and install a driver for the hardware from Windows Update, and then launch an installer for the associated Razer software. This provides the option of installing the software in a folder of one's choosing. Afterwards, it is possible to start Powershell from that folder, in which case Powershell is granted the permissions of the folder from which it was launched. It is possible to do anything with those administrative privileges from that point on. Physical access to a computer, as well as the ability to plug in or emulate Razer gear, are required for the hack to work. As a result, the scope on which this can be exploited is limited as a result.

Check the exploit video here.







« Gamer finds a latex thimble tucked away in his GeForce RTX 3090 Founders Edition · Razer to fix bug gives users admin rights on Windows via installer · MSI Introduces the Cubi N Mini PCs, Powered by Intel's "Jasper Lake" Processors »

Related Stories

ASRock teams up with Razer to bring you X570 and B550 Taichi Razer Edition Motherboards - 11/30/2020 04:59 PM
ASRock announced a new partnership with Razer to develop the ASRock Taichi Razer Edition line of motherboards, the world's first motherboard that is natively integrated with Razer Chroma RGB lighting...

Razer To Launch Expansion Gaming Peripherals at RazerCon 2020 - 10/13/2020 09:00 AM
Razer, the leading global lifestyle brand for gamers, made October 10, 2020 a day to remember for the global gaming community....

Razer Tomahawk PC Gaming Chassis - 01/08/2019 07:22 PM
Razer announced today the latest entry to the Designed by Razer Case program – The Lian Li O11 Dynamic. Additionally, it introduced two mid-tower PC gaming chassis developed in-house &nd...

Razer to release the Panthera Evo evolution of the Arcade Stick - 08/07/2018 08:38 AM
Razer unveiled Razer Panthera Evo to further support the fighting game community and improve their line of high quality arcade-style controllers. The Razer Panthera Evo is an evolution of the best-sel...

Antec and Razer to Offer Mini-ITX Gaming Chassis - 09/05/2016 08:50 AM
 The Antec Cube-Designed by Razer combines the e-sports design elements of Razer, with the reliability and build quality of Antec, into a small form factor case for gamers....


entr0cks
Senior Member



Posts: 107
Joined: 2010-06-18

#5940293 Posted on: 08/23/2021 08:47 AM
Don't exactly like giving admin privileges to programs (incl. games) as well.

Krizby
Senior Member



Posts: 1456
Joined: 2005-05-04

#5940350 Posted on: 08/23/2021 12:06 PM
I have Razer Viper Ultimate mouse and the POS Razer software sometimes freeze all keyboard and mouse input LMAO. It happened in game and I couldn't do anything but the game still run fine, uninstalled the software and everything works fine.

I_Eat_You_Alive
Senior Member



Posts: 108
Joined: 2019-06-08

#5940459 Posted on: 08/23/2021 06:56 PM
Sloppy

Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2022