CyberRota Analysis
AI-GeneratedLocal users of PassMark PerformanceTest, BurnInTest, and OSForensics prior to specified builds are vulnerable to a privilege escalation flaw in DirectIo64.sys, allowing them to manipulate physical memory addresses. This vulnerability can lead to unauthorized access to kernel code pages or page table entries, potentially resulting in local privilege escalation or complete system compromise. Organizations using these applications should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the physical address parameter in an exposed IOCTL handler. Attackers can obtain a device handle and supply an arbitrary 64-bit physical address with a bit index to invoke MmMapIoSpace and clear bits in kernel code pages or page table entries, enabling local privilege escalation or system compromise.