VULNERABILITY INTELLIGENCE

CVE-2020-13518

CVSS score6.5 MEDIUM

EPSS probability0.52%

CISA KEVNot currently listed

Published2020-12-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Description

An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability.

Weakness classification

CWE-269: Improper Privilege Management

Primary references

talos-cna@cisco.com — Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory