CVE-2020-15480

Name of the Vulnerable Software and Affected Versions PassMark BurnInTest versions through 9.1 OSForensics versions through 7.1 PerformanceTest versions through 10

Description An issue was discovered that allows low-privilege users to read and write to arbitrary Model Specific Registers (MSRs) through the kernel driver's IOCTL functionality. This could lead to arbitrary Ring-0 code execution and escalation of privileges, affecting the DirectIo32.sys and DirectIo64.sys drivers.

Recommendations For PassMark BurnInTest versions through 9.1, update to a version that fixes the issue with the DirectIo32.sys and DirectIo64.sys drivers. For OSForensics versions through 7.1, update to a version that fixes the issue with the DirectIo32.sys and DirectIo64.sys drivers. For PerformanceTest versions through 10, update to a version that fixes the issue with the DirectIo32.sys and DirectIo64.sys drivers.