High severity8.1NVD Advisory· Published Sep 2, 2020· Updated Jun 17, 2026
CVE-2020-16602
CVE-2020-16602
Description
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file created under "%PROGRAMDATA%\Razer Chroma\SDK\Apps" can be replaced before it is executed by the server. The attacker must have access to port 54236 for a registration step.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Razer/Chroma SDKdescription
- Range: <=3.12.17
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/160225/Razer-Chroma-SDK-Server-3.16.02-Race-Condition.htmlnvdExploitThird Party AdvisoryVDB Entry
- assets.razerzone.com/dev_portal/REST/html/index.htmlnvdVendor Advisory
- www.angelystor.com/2020/09/cve-2020-16602-remote-file-execution-on.htmlnvdThird Party Advisory
- www.youtube.com/watchnvdThird Party Advisory
News mentions
0No linked articles in our index yet.