PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to issue arbitrary IN and OUT instructions to any x86 I/O port due to missing allowlist or port validation on exposed IOCTLs. Attackers can obtain a device handle and write to sensitive ports including the PS/2 controller port, CPU reset ports, CMOS configuration ports, and interrupt controller ports to cause an immediate system reset or other hardware-level manipulation from a standard user account.

A privilege escalation vulnerability exists in DirectIo64.sys, a kernel driver used by PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016). The vulnerability arises from missing allowlist or port validation on exposed IOCTLs, allowing local users to issue arbitrary IN and OUT instructions to any x86 I/O port. Attackers can exploit this by obtaining a device handle and writing to sensitive hardware ports including PS/2 controller, CPU reset, CMOS configuration, and interrupt controller ports. This enables immediate system resets or other hardware-level manipulations from a standard user account. The flaw represents a significant local privilege escalation risk on Windows systems where any of the affected PassMark products are installed. Patches have been released in the respective updated build versions of each affected product.