The eudskacs.sys driver version 20250328, included with EaseUs Todo Backup 1.2.0.1, improperly validates privileges for IRP_MJ_READ and IRP_MJ_WRITE requests to its device object. This vulnerability (CVE-2025-50892) permits a local attacker with low privileges to perform unauthorized raw disk operations, which can result in disclosure of sensitive data, denial of service conditions, or escalation of local privileges. The CVSS 3.1 base score is 7.8, reflecting high severity with local attack vector, low attack complexity, and no user interaction required.

Exploitation of this vulnerability allows a local attacker to read and write raw disk data without proper authorization. This can lead to disclosure of sensitive information stored on the disk, disruption of system availability through denial of service, or elevation of privileges on the affected system.

No official patch or remediation has been published by the vendor as of the current information. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious local activity involving the EaseUs Todo Backup driver.