Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the context of NT AUTHORITY\SYSTEM, leading to total system takeover, a similar issue to CVE-2018-12441.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Corsair Link 安全漏洞
Vulnerability Description
Corsair Link是美国海盗船（Corsair）公司的一款用于监控Corsair产品状态的统一软件。该软件能够监视Corsair产品的电源输入和输出，以及其温度和风扇速度等。 Corsair Link 4.9.7.35版本中的‘CLink4Service’服务存在安全漏洞。攻击者可利用该漏洞控制服务并在AUTHORITYSYSTEM权限的上下文中执行命令，进而控制系统。
CVSS Information
N/A
Vulnerability Type
N/A