CVE-2019-13142

MEDIO 5.5CVE-2019-13142 · Published 09/07/2019 · updated 17/06/2026

In breve

CVE-2019-13142 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda surround (razer).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.29%, superiore al 21.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
surround razer	`= 1.1.63.0`	No fix yet

Description

The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver\. The DACL on this folder allows any user to overwrite contents of files in this folder, resulting in Elevation of Privilege.

References

posts.specterops.io/cve-2019-13142-razer-surround-1-1-63-0-eop-f18c52b8be0c · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free