cam vulnerabilities and fixes

Recent CVEs affecting cam, with upgrade or downgrade steps. 11 tracked.

cam has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-18. Highest priority: CVE-2020-13519 (score 48/100).

• CVE-2020-13519 HIGH 8.8 DOWNGRADE A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM
• CVE-2020-13518 MEDIUM 6.5 DOWNGRADE An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT
• CVE-2020-13517 MEDIUM 5.5 DOWNGRADE An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT
• CVE-2020-13516 MEDIUM 6.5 DOWNGRADE An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT
• CVE-2020-13515 HIGH 8.8 DOWNGRADE A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM
• CVE-2020-13514 HIGH 8.8 DOWNGRADE A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality
• CVE-2020-13513 HIGH 8.8 DOWNGRADE A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality
• CVE-2020-13512 HIGH 8.8 DOWNGRADE A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality
• CVE-2020-13511 MEDIUM 6.5 DOWNGRADE An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionalit
• CVE-2020-13510 MEDIUM 6.5 DOWNGRADE An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionalit
• CVE-2020-13509 MEDIUM 6.5 DOWNGRADE An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionalit

FAQ

How do I fix cam vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cam being exploited right now?

None of the tracked cam CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cam CVE should I patch first?

CVE-2020-13519 currently ranks highest (48/100): A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM.

RSS feed for cam · ← Back to latest CVEs