Information Disclosure Vulnerability in NZXT CAM by NZXT

CVE-2020-13510

What is CVE-2020-13510?

An information disclosure vulnerability has been identified in the NZXT CAM application, specifically in the WinRing0x64 Driver's Privileged I/O Read IRPs functionality. This issue arises from a specially crafted I/O request packet (IRP) that allows a low privilege user to gain unrestricted access to the IN instruction at an elevated privilege level. By sending a malicious IRP to the system, an attacker can exploit this vulnerability, potentially leading to unauthorized access to sensitive information.

References