CVE-2020-13509

NZXT CAM 4.8.0 is affected by CVE-2020-13509 due to the WinRing0x64 driver’s Privileged I/O Read IRPs functionality. A crafted IRP (0x9c4060cc) allows a low-privilege user to perform an unrestrained IN instruction at elevated privileges, enabling potential leakage of sensitive data. Affected comp...

CVE-2020-13516

CVE-2020-13516 affects NZXT CAM 4.8.0 through the WinRing0x64 driver IRP 0x9c406144. A low‑privilege, local attacker can trigger an information disclosure by sending a crafted IRP, which can cause querying of bus data via HalGetBusDataByOffset to reveal sensitive information. The TALOS report doc...

CVE-2020-13517

NZXT CAM 4.8.0 is affected by an information disclosure vulnerability in the WinRing0x64 driver IRP 0x9c406104. The underlying root cause is that the IRP gives low-privilege users direct access to MmMapIoSpace, enabling reads of physical memory (including BIOS regions). Exploitation reads memory ...

CVE-2020-13510

The CVE-2020-13510 entry affects NZXT CAM 4.8.0 via the WinRing0x64 driver; TALOS confirms an information-disclosure vulnerability in the Privileged I/O Read IRP path, exploited by the IRP 0x9c4060d0 to read I/O ports at elevated privileges. The vulnerability enables a low-privilege user to acces...

CVE-2020-13512

NZXT CAM 4.8.0 is affected by a privilege-escalation in the WinRing0x64 driver’s Privileged I/O Write IRPs. A crafted IRP (notably 0x9c40a0d8) can grant a low-privilege user elevated access by writing to CPU I/O ports, enabling privilege escalation. Public disclosures (Talos, Red Hat, CNVD, CVE r...

CVE-2020-13518

NZXT CAM 4.8.0 is affected by an information-disclosure vulnerability in the WinRing0x64 driver IRP 0x9c402084. Talos details show an attacker with low privileges could trigger an IRP to read MSR via the driver, exposing sensitive information locally. The PoC demonstrates reading MSR 0xC0000080 (...

CVE-2020-13511

The CVE-2020-13511 entry affects NZXT CAM 4.8.0 via the WinRing0x64 driver’s Privileged I/O Read IRPs. The TALOS report and CVE records describe an information-disclosure flaw where an attacker with local access can trigger IRP 0x9c4060d4 to read privileged processor I/O data (in this case, via I...

CVE-2020-13513

CVE-2020-13513 affects NZXT CAM 4.8.0 via the WinRing0x64 Driver Privileged I/O Write IRPs. The vulnerability arises from an IRP (0x9c40a0dc) that allows a low-privilege user to execute OUT instructions at an elevated privilege level, enabling privilege escalation. The TALOS report confirms the p...

CVE-2020-13515

NZXT CAM 4.8.0 is affected by a privilege-escalation vulnerability in the WinRing0x64 Driver IRP 0x9c40a148. A specially crafted I/O request packet can let an attacker obtain elevated privileges by interacting with the driver, as detailed by TALOS and other sources. Product: NZXT CAM 4.8.0; vulne...

CVE-2020-13514

CVE-2020-13514 affects NZXT CAM 4.8.0 via the WinRing0x64 Driver Privileged I/O Write IRPs. A crafted IRP (notably 0x9c40a0e0) can grant a low-privilege user unrestrained access to the OUT instruction at elevated privileges, enabling privilege escalation locally. The TALOS entry explicitly tests ...

CVE-2020-13519

NZXT CAM 4.8.0 is affected by a privilege-escalation vulnerability in the WinRing0x64 Driver IRP 0x9c402088. The IRP can be triggered by a crafted input to gain elevated privileges, potentially enabling writes to MSR via the wrmsr path exposed by the driver. Public disclosures (Talos/TALOS-2020-1...