CVE-2020-13519

HIGH

NZXT CAM 4.8.0 - Privilege Escalation

Title source: llm
STIX 2.1

Description

A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause increased privileges. An attacker can send a malicious IRP to trigger this vulnerability.

Exploits (1)

nomisec WORKING POC 4 stars
by SpiralBL0CK · poc
https://github.com/SpiralBL0CK/poc-for-CVE-2020-13519-still-under-construction-

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1116

Scores

CVSS v3 8.8
EPSS 0.0014
EPSS Percentile 33.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-269 CWE-862
Status published
Products (1)
nzxt/cam 4.8.0
Published Dec 18, 2020
Tracked Since Feb 18, 2026