CVE-2020-15368

—

CVSS 3.1

5.5 medium

EPSS

1%p70

Published

Jun 29, 2020 (Jun 29, 2020)

Modified

Jun 17, 2026

Description

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3.

Vendors: asrock
Products: rgb driver firmware
Weakness: CWE-269
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news2 stories

U.S. Warns of APT Hackers Targeting ICS/SCADA Systems with Specialized Malware

The Hacker NewsMay 26, 06:11 UTC · May 26, 2023Malware CVE-2020-15368

US gov agencies e private firms warn nation-state actors are targeting ICS & SCADA devices

Security AffairsApr 14, 15:10 UTC · Apr 14, 2022Threat actor CVE-2020-15368