PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening a handle to the device object created without a security descriptor. Attackers can issue IOCTLs through the permissive default Windows ACL applied to the device to access restricted hardware operations regardless of privilege or integrity level.

A critical improper access control vulnerability exists in the DirectIo64.sys kernel driver used by PassMark PerformanceTest, BurnInTest, and OSForensics. The flaw allows unprivileged local users to perform privileged hardware operations by opening a handle to a device object created without a security descriptor. Attackers can exploit permissive default Windows ACLs to issue IOCTLs and access restricted hardware operations regardless of their privilege or integrity level. Affected versions include PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016. The vulnerability represents a privilege escalation risk on Windows systems where these products are installed. Fixed versions have been released by PassMark for all three affected products.