Skip to content
fr Sign in
6.5 Medium

CVE-2020-13511 An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of…

Description

An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) using the IRP 0x9c4060d4 gives a low privilege user direct access to the IN instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
NZXT Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of NZXT

The 10 CVEs of NZXT →
CVE-2020-13514 A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT… 8.8 High CVE-2020-13513 A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT… 8.8 High CVE-2020-13512 A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT… 8.8 High CVE-2020-13515 A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0 8.8 High
Track this CVE