Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-13470 State: PUBLISHED Published: 2020-08-31T15:33:32 Last Updated: 2024-08-04T12:18:18.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13471 State: PUBLISHED Published: 2020-08-31T15:38:43 Last Updated: 2024-08-04T12:18:18.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13472 State: PUBLISHED Published: 2020-08-31T15:41:12 Last Updated: 2024-08-04T12:18:18.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module. Additional Analyst Notes: - CVE Program Container: References: - https://www.usenix.org/system/files/woot20-paper-obermaier.pdf
CVE ID: CVE-2020-13473 State: PUBLISHED Published: 2020-12-28T21:16:55 Last Updated: 2024-08-04T12:18:18.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://cvewalkthrough.com/cve-2020-13473-nch-account-clear-text-password-storage/ - https://tejaspingulkar.blogspot.com/2020/12/cve-2020-13473-nch-account-clear-text.html
CVE ID: CVE-2020-13474 State: PUBLISHED Published: 2020-12-28T21:19:19 Last Updated: 2024-08-04T12:18:18.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users. Additional Analyst Notes: - CVE Program Container: References: - https://cvewalkthrough.com/cve-2020-13474-nch-express-accounts-privilege-escalation/ - https://tejaspingulkar.blogspot.com/2020/12/cve-2020-13474-nch-express-accounts.html
CVE ID: CVE-2020-13476 State: PUBLISHED Published: 2020-12-28T21:21:31 Last Updated: 2024-08-04T12:18:18.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module. Additional Analyst Notes: - CVE Program Container: References: - https://tejaspingulkar.blogspot.com/2020/12/cve-2020-13475-nch-accounts-cross-site.html
CVE ID: CVE-2020-13480 State: PUBLISHED Published: 2020-06-22T17:31:17 Last Updated: 2024-08-04T12:18:18.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature. Additional Analyst Notes: - CVE Program Container: References: - http://cvewalkthrough.com/cve-2020-13480html-injection - https://tejaspingulkar.blogspot.com/2020/06/cve-2020-13480-verint-html-injection.html - https://www.youtube.com/watch?v=11ghigOu-K0
CVE ID: CVE-2020-13481 State: PUBLISHED Published: 2025-02-19T00:00:00.000Z Last Updated: 2025-02-20T15:23:51.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://support.lexmark.com/alerts/ - https://publications.lexmark.com/publications/security-alerts/CVE-2020-13481.pdf
CVE ID: CVE-2020-13482 State: PUBLISHED Published: 2020-05-25T21:49:30 Last Updated: 2024-08-04T12:18:18.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/igrigorik/em-http-request/issues/339 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKYP5TR5NTVVDX5R4HCNNH2OQR7M4X3J/ - https://lists.fedoraproject.org/archives/list/package-
sts.fedoraproject.org/message/MKYP5TR5NTVVDX5R4HCNNH2OQR7M4X3J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z32PUJA6RGBZ3TKSOTGUXZ45662S3MVF/ - https://securitylab.github.com/advisories/GHSL-2020-094-igrigorik-em-http-request
CVE ID: CVE-2020-13483 State: PUBLISHED Published: 2020-06-24T14:33:28 Last Updated: 2024-08-04T12:18:18.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/bitrix/mobileapp.list/ajax.php/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/mariuszpoplwski/ca6258cf00c723184ebd2228ba81f558
CVE ID: CVE-2020-13484 State: PUBLISHED Published: 2020-06-24T14:28:01 Last Updated: 2024-08-04T12:18:18.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL hosts an HTML document containing '<meta name="og:image" content="' followed by an intranet URL. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/mariuszpoplwski/f261a4bc06adde5c78760559db9d63bd
CVE ID: CVE-2020-13485 State: PUBLISHED Published: 2020-05-25T22:38:53 Last Updated: 2024-08-04T12:18:18.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verbb/knock-knock/blob/craft-3/CHANGELOG.md - https://limpidsecurity.pl/security-advisories/1/knock-knock-plugin-for-craft-cms/
CVE ID: CVE-2020-13486 State: PUBLISHED Published: 2020-05-25T22:38:42 Last Updated: 2024-08-04T12:18:18.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/verbb/knock-knock/blob/craft-3/CHANGELOG.md
CVE ID: CVE-2020-13487 State: PUBLISHED Published: 2020-05-26T13:10:48 Last Updated: 2024-08-04T12:18:18.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?post_type=forum (aka the Forum listing page) for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI. Additional Analyst Notes: - CVE Program Container: References: - https://codex.bbpress.org/releases/ - https://wordpress.org/plugins/bbpress/#developers - https://bbpress.org/ - https://www.youtube.com/watch?v=3rXP8CGTe08
CVE ID: CVE-2020-13493 State: PUBLISHED Published: 2020-12-02T17:25:18 Last Updated: 2024-08-04T12:18:18.279Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Pixar Problem Types: CWE-122 Description: A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2
tional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094
CVE ID: CVE-2020-13494 State: PUBLISHED Published: 2020-12-02T17:28:30 Last Updated: 2024-08-04T12:18:18.347Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Pixar Problem Types: CWE-122 Description: A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.
nd aid further exploitation. To trigger this vulnerability, victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1103
CVE ID: CVE-2020-13495 State: PUBLISHED Published: 2022-04-18T16:15:20.877Z Last Updated: 2025-04-15T19:05:16.456Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Apple, Pixar Products: macOS, OpenUSD Problem Types: CWE-119 Description: An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypass mitigations and aid additional exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided file.
ns and aid additional exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1104
CVE ID: CVE-2020-13496 State: PUBLISHED Published: 2020-12-02T17:30:18 Last Updated: 2024-08-04T12:18:18.337Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Pixar Problem Types: CWE-119 Description: An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in TfToken Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: Refer
the victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1105
CVE ID: CVE-2020-13497 State: PUBLISHED Published: 2020-12-02T17:30:27 Last Updated: 2024-08-04T12:18:18.433Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Pixar Problem Types: CWE-119 Description: An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access in String Type Index. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: Refere
he victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1105
CVE ID: CVE-2020-13498 State: PUBLISHED Published: 2020-12-02T17:30:32.703375Z Last Updated: 2024-09-16T19:01:10.822Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Apple, Pixar Products: macOS, OpenUSD Problem Types: CWE-125 Description: An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. Additiona
r exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1105
CVE ID: CVE-2020-13499 State: PUBLISHED Published: 2020-09-24T14:16:30 Last Updated: 2024-08-04T12:18:18.353Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Aveva Problem Types: CWE-89 Description: An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstancePath in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1
l Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106 - https://us-cert.cisa.gov/ics/advisories/icsa-20-254-01
CVE ID: CVE-2020-13500 State: PUBLISHED Published: 2020-09-24T14:16:37 Last Updated: 2024-08-04T12:18:18.433Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Aveva Problem Types: CWE-89 Description: SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter ClassName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106 -
yst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1106 - https://us-cert.cisa.gov/ics/advisories/icsa-20-254-01
CVE ID: CVE-2020-13501 State: PUBLISHED Published: 2020-09-24T14:39:58 Last Updated: 2024-08-04T12:18:18.364Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Aveva Problem Types: CWE-89 Description: An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstanceName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1
CVE ID: CVE-2020-13502 State: REJECTED Published: 2020-09-24T14:10:37 Last Updated: 2020-09-29T20:25:01 Description: No description available.
CVE ID: CVE-2020-13503 State: REJECTED Published: 2020-09-24T14:12:48 Last Updated: 2020-09-29T19:44:33 Description: No description available.
CVE ID: CVE-2020-13504 State: PUBLISHED Published: 2020-09-24T14:12:55 Last Updated: 2024-08-04T12:18:18.269Z Vendors: n/a Products: Aveva Problem Types: SQL injection Description: Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108
CVE ID: CVE-2020-13505 State: PUBLISHED Published: 2020-09-24T14:13:06 Last Updated: 2024-08-04T12:18:18.365Z Vendors: n/a Products: Aveva Problem Types: SQL injection Description: Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker can send unauthenticated HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1108
CVE ID: CVE-2020-13506 State: REJECTED Published: 2020-09-29T20:08:08 Last Updated: 2020-09-29T20:08:08 Description: No description available.
CVE ID: CVE-2020-13507 State: REJECTED Published: 2020-09-24T14:43:03 Last Updated: 2020-09-29T19:41:27 Description: No description available.
CVE ID: CVE-2020-13508 State: REJECTED Published: 2020-09-24T14:43:10 Last Updated: 2020-09-29T19:43:09 Description: No description available.
CVE ID: CVE-2020-13509 State: PUBLISHED Published: 2020-12-17T23:46:04 Last Updated: 2024-08-04T12:18:18.392Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) Using the IRP 0x9c4060cc gives a low privilege user direct access to the IN instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability and this access could allow for information leakage of sen
tacker can send a malicious IRP to trigger this vulnerability and this access could allow for information leakage of sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1110
CVE ID: CVE-2020-13510 State: PUBLISHED Published: 2020-12-17T23:46:11 Last Updated: 2024-08-04T12:18:18.296Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) using the IRP 0x9c4060d0 gives a low privilege user direct access to the IN instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: Refere
tacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1110
CVE ID: CVE-2020-13511 State: PUBLISHED Published: 2020-12-17T23:46:17 Last Updated: 2024-08-04T12:18:18.468Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) using the IRP 0x9c4060d4 gives a low privilege user direct access to the IN instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: Refere
CVE ID: CVE-2020-13512 State: PUBLISHED Published: 2020-12-18T19:42:27 Last Updated: 2024-08-04T12:18:18.442Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause increased privileges. Using the IRP 0x9c40a0d8 gives a low privilege user direct access to the OUT instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: -
evated privilege level. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1111
CVE ID: CVE-2020-13513 State: PUBLISHED Published: 2020-12-18T19:42:38 Last Updated: 2024-08-04T12:18:18.355Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause increased privileges. Using the IRP 0x9c40a0dc gives a low privilege user direct access to the OUT instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: -
CVE ID: CVE-2020-13514 State: PUBLISHED Published: 2020-12-18T19:42:50 Last Updated: 2024-08-04T12:18:18.332Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause increased privileges. Using the IRP 0x9c40a0e0 gives a low privilege user direct access to the OUT instruction that is completely unrestrained at an elevated privilege level. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: -
CVE ID: CVE-2020-13515 State: PUBLISHED Published: 2020-12-18T19:38:31 Last Updated: 2024-08-04T12:18:18.508Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause an adversary to obtain elevated privileges. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1112
CVE ID: CVE-2020-13516 State: PUBLISHED Published: 2020-12-17T23:52:11 Last Updated: 2024-08-04T12:18:18.424Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1113
CVE ID: CVE-2020-13517 State: PUBLISHED Published: 2020-12-17T23:51:53 Last Updated: 2024-08-04T12:18:18.349Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: NZXT Problem Types: CWE-269 Description: An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1114