CyberRota Analysis
AI-GeneratedThe vulnerability allows unprivileged user-mode attackers to access privileged hardware functionality via the `\\.\TdeIo` device interface in Pegatron's `Tdelo64.sys`, specifically through the `TDE_IOCTL_INDEXIO_READ` and `TDE_IOCTL_INDEXIO_WRITE` IOCTL handlers. This can lead to unauthorized manipulation of hardware registers, potential firmware tampering, and system instability, posing a critical risk to system integrity. Organizations using affected Pegatron products should prioritize immediate remediation to mitigate the risk of local exploitation.
Original NVD Description
Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interface. IOCTL handlers including `TDE_IOCTL_INDEXIO_READ` and `TDE_IOCTL_INDEXIO_WRITE` permit unprivileged user-mode callers to perform arbitrary hardware I/O port reads and writes without authorization checks. A local attacker can abuse this functionality to manipulate hardware registers, tamper with firmware-related interfaces, cause system instability, or establish persistent low-level compromise.