Vulnerability Spotlight: Multiple vulnerabilities in NZXT computer monitoring software

Summary: Cisco Talos discovered multiple vulnerabilities in the WinRing0x64 driver of NZXT CAM 4.8.0, the computer monitoring software that reports fan speeds, temperature, RAM usage, network activity and installed peripherals. A specially crafted I/O request packet (IRP) can trigger privilege escalation or disclosure of sensitive information, and Talos worked with NZXT under its coordinated disclosure policy to ensure an update is available.
Bottom line: The vulnerable component is a driver in desktop monitoring software that reports on hardware and peripherals, so a malicious IRP can hand an attacker elevated privileges or sensitive data on the victim machine. Talos confirmed version 4.8.0 is affected and published Snort rules 54440-54451, 54454, 54456, 54458, 54460 and 54461 to detect exploitation attempts.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-13509 CVE-2020-13511 CVE-2020-13512 CVE-2020-13514 CVE-2020-13515 CVE-2020-13516 CVE-2020-13517 CVE-2020-13518 CVE-2020-13519
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026