CVE-2026-80114
Received Received - Intake

Hard-Coded Credentials in PassMark PerformanceTest

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulnCheck

Description
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a hard-coded credentials vulnerability in DirectIo64.sys that allows local attackers to perform arbitrary physical memory writes by extracting an 8-byte key embedded as a hardcoded literal in the distributed binary and computing valid MD5 authentication tags for arbitrary IOCTL write requests. Attackers can additionally bypass a secondary validation gate by using the driver's own bit-clear IOCTL to clear a single bit in the gating instruction's displacement byte, causing all subsequent write requests to skip MAC verification, size checks, and Vendor ID checks entirely.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80114
EUVD
EUVD-2026-71685

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
passmark performancetest to 11.1.1012 (exc)
passmark burnintest to 11.1.1000 (exc)
passmark osforensics to 11.1.1016 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-321 The product uses a hard-coded, unchangeable cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves hard-coded credentials in PassMark PerformanceTest, BurnInTest, and OSForensics software versions before 11.1 build 1012, 1000, and 1016 respectively. The flaw exists in the DirectIo64.sys driver, which contains an embedded 8-byte key. Attackers can extract this key to forge MD5 authentication tags for arbitrary IOCTL write requests, enabling arbitrary physical memory writes. Additionally, they can bypass security checks by clearing a specific bit in the driver's validation gate, allowing all subsequent write requests to skip MAC verification, size checks, and Vendor ID checks.

Detection Guidance

This vulnerability involves hard-coded credentials in DirectIo64.sys and requires local access to exploit. Detection involves checking for vulnerable versions of PassMark PerformanceTest, BurnInTest, or OSForensics. Use system monitoring tools to inspect running drivers and file versions. No specific commands are provided in the context.

Impact Analysis

This vulnerability allows local attackers to perform arbitrary physical memory writes on affected systems. This could lead to privilege escalation, data corruption, or unauthorized access to sensitive information. Attackers could install malware, modify system behavior, or exfiltrate confidential data. The impact is significant for systems running vulnerable versions of the affected software.

Compliance Impact

This vulnerability allows local attackers to perform arbitrary physical memory writes, which could lead to unauthorized data access, modification, or deletion. Such capabilities may violate data integrity and confidentiality requirements in GDPR and HIPAA, potentially resulting in non-compliance with these regulations.

Mitigation Strategies

Update PassMark PerformanceTest to version 11.1 build 1012 or later, BurnInTest to version 11.1 build 1000 or later, and OSForensics to version 11.1 build 1016 or later to address the hard-coded credentials vulnerability in DirectIo64.sys.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80114. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart