Replies posted by leetbusVividCerise468 | Razer Insider

Replies posted by leetbusVividCerise468

6 Replies

leetbusVividCerise468
leetbusVividCerise468Insider Mini
asked in Razer Synapse

Razer Synapse 3 LibWebP vulnerabilities (CVE-2023-1999 & CVE-2023-4863)

Hi guys,  Probably some good news for you: There is a NEW Synapse Software available (BETA). You can check it out here: https://www.razer.com/de-de/synapse-new (german setting) The new software come with a new UI and has this issue resolved as the vulnerable .dll files are not installed anymore:   Hope this helps! Cheers, CS Good to know that a later version should fix this, but security policy prevents me from using ‘Beta’ software on our production devices.Making customers wait for the later Synapse to be released is not the fix for this, Razer needs to provide a patched version of the existing Razer software versions - Like any good software vendor. 🤷🏻

13
S
11 days ago
leetbusVividCerise468
leetbusVividCerise468Insider Mini
asked in Razer Synapse

Razer Synapse 3 LibWebP vulnerabilities (CVE-2023-1999 & CVE-2023-4863)

For removing Razer drivers you can use this app: https://rzr.to/Tf53xj really helpful tool. FYI: This app does not appear to work on a fully upto date patched Windows 10 22H2 (10.0.19045.4170), launching the application from an Administrative prompt (Powershell or Command prompt) doesn’t appear to do anything I’ve watched the CPU activity for the App and within a couple of seconds it stops at 0% and never increases, so I can only conclude it has failed - I suspect due to the age of this command line app it may require a specific .NET Framework that has now been superceded.I have had to resort to using my method above to remove ‘Ghost devices’

13
S
11 days ago
leetbusVividCerise468
leetbusVividCerise468Insider Mini
asked in Razer Synapse

Razer Synapse 3 LibWebP vulnerabilities (CVE-2023-1999 & CVE-2023-4863)

Sadly after 2.5 weeks I have still had absolutely no response from Razer’s support team.Their response to my question just goes to show how good their support actually is 😜For users devices that no longer use Razer hardware, I have so far:Checked that Razer Synapse 3 is uninstalled - it was and the C:\Windows\Installer\Razer folder still existed Uninstalled (and deleted) all ‘ghost’ device drivers for Razer devices (Open Device Manager and choose: View > Show Hidden Devices, you will see them as "greyed out" devices. Right click and select uninstall) Deleted the C:\Windows\Installer\Razer folderI am not sure if this would have any long term consequences or if this would be a ‘supported’ solution, but I needed to make progress on removing these high severity CVEsIf any of our users still use Razer hardware, No fix has been suggested. Come on Razer (@Razer.Speedcr0ss @Razer.Aero @Razer.Zionzedd ? ) help us out here 🤷

13
S
11 days ago
leetbusVividCerise468
leetbusVividCerise468Insider Mini
asked in Razer Synapse

Razer Synapse 3 LibWebP vulnerabilities (CVE-2023-1999 & CVE-2023-4863)

Am I talking into a black hole with this Security Vulnerability?@Razer.Speedcr0ss @Razer.Aero @Razer.Zionzedd ?

13
S
11 days ago
leetbusVividCerise468
leetbusVividCerise468Insider Mini
asked in Razer Synapse

Razer Synapse 3 LibWebP vulnerabilities (CVE-2023-1999 & CVE-2023-4863)

Can anyone at Razer Support provide an answer please?

13
S
11 days ago
leetbusVividCerise468
leetbusVividCerise468Insider Mini
asked in Razer Synapse

Razer Synapse 3 LibWebP vulnerabilities (CVE-2023-1999 & CVE-2023-4863)

Update:I have checked via our software discovery to get a better idea of what app (and version) are installed on each device - sadly none of them show any Razer software installed.So, I have just performed a local investigation on one of our affected devices and there is no evidence of any Razer software installed in Add or Remove programs.The users device I have checked this morning no-longer uses their Razer device, and it would appear that this software folder is created during a plug and play driver installation.I have run the following PowerShell command on the users device (in the “C:\Windows\Installer\Razer\” folder):Get-ChildItem libwebp*.dll,Razer*.dll,RazerInstaller.exe -Recurse -Force -ErrorAction SilentlyContinue | Select-Object versioninfo -ExpandProperty versioninfo | Sort-Object ProductVersion,FileVersionRaw,Filename | Select-Object ProductVersion,FileVersionRaw,Filename | Format-Table -AutoSizeand these are the results:ProductVersion FileVersionRaw FileName-------------

13
S
11 days ago

Badges

View More
CookiesCookie settings