CVE-2020-22057

2021-12-2819:18:41

mitre

www.cve.org

evga precision xoc

default security descriptor

vulnerability

low-level drivers

sensitive components

data access

AI Score

9.3

Confidence

High

EPSS

0.002

Percentile

61.0%

JSON

The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default security descriptor which allows attackers to access sensitive components and data.

References

gist.github.com/hfiref0x/859f88bfa8adde49ea16fad7d58e3b37