| Package | Affected versions | Patched versions |
|---|---|---|
| corsair utility engine | = 3.2.87= 3.3.103= 3.4.95= 3.6.109= 3.7.99 |
The CorsairService Service in Corsair Utility Engine is installed with insecure default permissions, which allows unprivileged local users to execute arbitrary commands via modification of the CorsairService BINARY_PATH_NAME, leading to complete control of the affected system. The issue exists due to the Windows "Everyone" group being granted SERVICE_ALL_ACCESS permissions to the CorsairService Service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free