CVE-2020-13512

A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause increased privileges. Using the IRP 0x9c40a0d8 gives a low privilege user direct access to the OUT instruction that...

CVE-2020-13512

NZXT CAM 4.8.0 is affected by a privilege-escalation in the WinRing0x64 driver’s Privileged I/O Write IRPs. A crafted IRP (notably 0x9c40a0d8) can grant a low-privilege user elevated access by writing to CPU I/O ports, enabling privilege escalation. Public disclosures (Talos, Red Hat, CNVD, CVE r...

NZXT CAM WinRing0x64 Driver Privileged I/O Write IRPs Privilege Escalation Vulnerability

Summary A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause increased privileges. An attacker can send a malicious IRP to trigger this vulnerability. Tested Versions...