Beveiligingsadvies

CVE-2020-9756

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-06 14:28:46
Laatst bijgewerkt 2024-08-04 10:43:04
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The IOCTL Codes 0x80102050 and 0x80102054 allows a local user with low privileges to read/write 1/2/4 bytes from or to an IO port. This could be leveraged in a number of ways to ultimately run code with elevated privileges.