CVE-2024-29404: Command Injection
An issue in Razer Synapse 3 v.3.9.131.20813 and Synapse 3 App v.20240213 allows a local attacker to execute arbitrary code via the export parameter of the Chroma Effects function in the Profiles component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29404?
CVE-2024-29404 has been classified as a high severity vulnerability due to its potential for arbitrary code execution by local attackers.
How do I fix CVE-2024-29404?
To mitigate CVE-2024-29404, update Razer Synapse 3 and Razer Synapse 3 App to the latest versions available from the official source.
Who is affected by CVE-2024-29404?
CVE-2024-29404 affects users of Razer Synapse 3 and Razer Synapse 3 App version 3.9.131.20813 and earlier.
What does CVE-2024-29404 allow an attacker to do?
CVE-2024-29404 allows a local attacker to execute arbitrary code through the export parameter in the Chroma Effects function of the Profiles component.
Is there a known exploit for CVE-2024-29404?
Yes, exploits for CVE-2024-29404 have been demonstrated, which underscores the importance of applying security updates promptly.