CVE-2020-22057 : The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC vers

The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default security descriptor which allows attackers to access sensitive components and data.

Published 2021-12-28 20:15:08

Updated 2022-01-12 16:17:14

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2020-22057

Evga » Precision Xoc » Version: 6.2.7
cpe:2.3:a:evga:precision_xoc:6.2.7:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-22057

EPSS FAQ

0.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-22057

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:P	10.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: Partial
9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	3.9	5.2	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: High

References for CVE-2020-22057

https://gist.github.com/hfiref0x/859f88bfa8adde49ea16fad7d58e3b37

EVGA PrecisionX OC 6.2.7 wormhole driver · GitHub
Third Party Advisory

Jump to

Vulnerability Details : CVE-2020-22057

Products affected by CVE-2020-22057

Exploit prediction scoring system (EPSS) score for CVE-2020-22057

CVSS scores for CVE-2020-22057

References for CVE-2020-22057