A programmer has discovered a zero-day bug in Synapse, the device installer software for Razer peripherals. Whether it be a Razer computer mouse, keyboard or any device that uses the utility, simply plugging in the device grants full admin rights on Windows 10 after downloading Synapse. So far, the vulnerability could be valid in Windows 11 as well, allowing the same privilege escalation, although it hasn’t yet been reported. Read more for a video demonstration and additional information.
Need local admin and have physical access?
– Plug a Razer mouse (or the dongle)
– Windows Update will download and execute RazerInstaller as SYSTEM
– Abuse elevated Explorer to open Powershell with Shift+Right clickTried contacting @Razer, but no answers. So here's a freebie pic.twitter.com/xDkl87RCmz
— jonhat (@j0nh4t) August 21, 2021
What happens is basically when a user plugs in a Razer device, Microsoft Windows 10 automatically seeks an installer containing that appropriate driver software and the Synapse utility. The Synapse installation then gives users the ability to gain system privileges on the Windows device since it opens an Explorer window that prompts the user to specify where the driver should be installed as part of the setup process.
- HERO Gaming Sensor: Next generation HERO mouse sensor delivers precision tracking up to 25600 DPI with zero smoothing, filtering or acceleration
- 11 programmable buttons and dual mode hyper-fast scroll wheel: The Logitech wired gaming mouse gives you fully customizable control over your gameplay
- Adjustable weights: Match your playing style. Arrange up to five 3.6 g weights for a personalized weight and balance configuration
We have investigated the issue, are currently making changes to the installation application to limit this use case, and will release an updated version shortly. The use of our software (including the installation application) does not provide unauthorized third-party access to the machine,” said Razer.
