Improper Access Control in PassMark PerformanceTest DirectIo64.sys Driver

Executive Summary

This vulnerability is an improper access control issue in PassMark PerformanceTest, BurnInTest, and OSForensics software versions before 11.1 build 1012, 1000, and 1016 respectively. The flaw exists in the DirectIo64.sys kernel driver, which allows unprivileged local users to perform privileged hardware operations by exploiting a device object without a proper security descriptor. Attackers can send IOCTLs through the default Windows ACL to bypass privilege checks and access restricted hardware operations regardless of user privilege or integrity level.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers with local access to execute privileged hardware operations, potentially leading to system instability, unauthorized data access, or privilege escalation. It could enable malware to persist on a system, bypass security controls, or perform actions that require elevated permissions without proper authorization.

Useful 0 Not Useful 0

Mitigation Strategies

Update PassMark PerformanceTest to version 11.1 build 1012 or later, BurnInTest to version 11.1 build 1000 or later, and OSForensics to version 11.1 build 1016 or later to address the improper access control vulnerability in DirectIo64.sys.

Useful 0 Not Useful 0