Essentially, if a user gains SYSTEM privileges in Windows, they attain complete control over the system and can install whatever they want, including malware.Simply plugging in a Razer keyboard or mouse could give an attacker administrator privileges on Windows 10 machines by automatically installing device software, a security researcher has discovered. SYSTEM privileges are the highest user rights available in Windows and allow someone to perform any command on the operating system. Their manner of communication has been professional and I have even been offered a bounty even though publicly disclosing this issue.- jonhat August 22, 2021 I would like to update that I have been reached out by and ensured that their security team is working on a fix ASAP. So here’s a freebie /xDkl87RCmz- jonhat August 21, 2021 – Abuse elevated Explorer to open Powershell with Shift+Right click – Windows Update will download and execute RazerInstaller as SYSTEM Need local admin and have physical access? The PnP feature has been included since Windows 95, so many other installations may have shared this exploit. Razer contacted him afterward and said its security team would look into it and offered him a bounty for finding it.Īnother researcher has pointed out that similar exploits will be discovered due to the process in which Windows plug-and-play works and how most users are usually in a hurry to finish an install process. Jon reached out to Razer about the bug and did not hear back, which is why he released a video about it. This exploit requires local access to a computer, but as many as 100 million people could be affected. A user can open PowerShell with admin rights, the highest a user can have in the OS. Once the peripheral is attached, an auto-install process begins with Razer Synapse Software, where the exploit becomes available. Security researcher jonhat has found a zero-day exploit that allows admin privileges on Windows 10 just by plugging in a Razer mouse or keyboard.

Razer naga software download windows 10