CVE-2020-15481: High severity passmark burnintest vulnerability

Published Nov 13, 2020

Updated

An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys drivers. This issue is fixed in BurnInTest v9.2, PerformanceTest v10.0 Build 1009, OSForensics v8.0.

Affected Software

3 affected components

PassMark BurnInTest=9.1-build_1008

PassMark OSForensics=7.1-build_1012

PassMark PerformanceTest=10.0-build_1008

Event History

Nov 13, 2020

CVE Published

via MITRE·08:59 PM

Data Sourced

via MITRE·08:59 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-15481?

CVE-2020-15481 has a medium severity rating as it allows low-privilege users to access arbitrary physical memory.

How do I fix CVE-2020-15481?

To fix CVE-2020-15481, users should update to the latest versions of PassMark BurnInTest, OSForensics, or PerformanceTest as applicable.

What software is affected by CVE-2020-15481?

CVE-2020-15481 affects PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008.

What type of vulnerability is CVE-2020-15481?

CVE-2020-15481 is a privilege escalation vulnerability that allows unauthorized memory access.

Who can exploit CVE-2020-15481?

CVE-2020-15481 can be exploited by low-privilege users on systems running the affected software.