CVE-2020-9756 - Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control

Back Back to CVE browser

HIGH

Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control

Published Mar 6, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.51%

Description

Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The IOCTL Codes 0x80102050 and 0x80102054 allows a local user with low privileges to read/write 1/2/4 bytes from or to an IO port. This could be leveraged in a number of ways to ultimately run code with elevated privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30536
Advisory
https://www.coresecurity.com/advisories/viper-rgb-driver-multiple-vulnerabilities
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30536		Advisory
https://www.coresecurity.com/advisories/viper-rgb-driver-multiple-vulnerabilities		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 6, 2020

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9756

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9756

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 6, 2020

Updated Aug 4, 2024

Link EUVD-2020-30536

GitHub

No data