CVEvulnerability

CVE-2020-14979

7.8 HIGH Published 2020-08-11 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2020-08-11
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the calling process.

Affected configurations

• evga precision x1 (<= 1.0.6) • winring0 project winring0 1.2.0

References

https://posts.specterops.io/cve-2020-14979-local-privilege-escalation-in-evga-precisionx1-cf63c6b95896 Third Party Advisory
https://www.evga.com/precisionx1/ Product, Vendor Advisory
https://posts.specterops.io/cve-2020-14979-local-privilege-escalation-in-evga-precisionx1-cf63c6b95896 Third Party Advisory
https://www.evga.com/precisionx1/ Product, Vendor Advisory