CVE-2020-16602
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 6.0%
from disclosure to weapon85 days
Published on NVDSep 2
1st PoC+85d
exploitation probability
6.0%top 8% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencepacketstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.htmlunverifiedexploitdbwww.exploit-db.com/exploits/49106unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.