343 matches found
CVE-2020-13512
NZXT CAM 4.8.0 is affected by a privilege-escalation in the WinRing0x64 driver’s Privileged I/O Write IRPs. A crafted IRP (notably 0x9c40a0d8) can grant a low-privilege user elevated access by writing to CPU I/O ports, enabling privilege escalation. Public disclosures (Talos, Red Hat, CNVD, CVE r...
CVE-2020-13516
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
CVE-2020-13517
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
CVE-2020-13510
An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP using the IRP 0x9c4060d0 gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...
CVE-2020-13511
An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP using the IRP 0x9c4060d4 gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...
CVE-2020-13509
An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP Using the IRP 0x9c4060cc gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...
CVE-2020-13518
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
Information disclosure
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
Information disclosure
An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP Using the IRP 0x9c4060cc gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...
Information disclosure
An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP using the IRP 0x9c4060d0 gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...
Information disclosure
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
CVE-2020-13516
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
CVE-2020-13516
CVE-2020-13516 affects NZXT CAM 4.8.0 through the WinRing0x64 driver IRP 0x9c406144. A low‑privilege, local attacker can trigger an information disclosure by sending a crafted IRP, which can cause querying of bus data via HalGetBusDataByOffset to reveal sensitive information. The TALOS report doc...
CVE-2020-13517
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
CVE-2020-13517
NZXT CAM 4.8.0 is affected by an information disclosure vulnerability in the WinRing0x64 driver IRP 0x9c406104. The underlying root cause is that the IRP gives low-privilege users direct access to MmMapIoSpace, enabling reads of physical memory (including BIOS regions). Exploitation reads memory ...
CVE-2020-13518
An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
CVE-2020-13511
An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP using the IRP 0x9c4060d4 gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...
CVE-2020-13510
The CVE-2020-13510 entry affects NZXT CAM 4.8.0 via the WinRing0x64 driver; TALOS confirms an information-disclosure vulnerability in the Privileged I/O Read IRP path, exploited by the IRP 0x9c4060d0 to read I/O ports at elevated privileges. The vulnerability enables a low-privilege user to acces...
CVE-2020-13510
An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP using the IRP 0x9c4060d0 gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...
CVE-2020-13509
An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP Using the IRP 0x9c4060cc gives a low privilege user direct access to the IN instruction that is completely unrestrained at ...