This vulnerability affects the kernel driver component (amwrtdrv.sys) of AOMEI Backupper versions up to 8.3.0. It involves improper access controls that could allow a local attacker with limited privileges to manipulate the driver, potentially leading to unauthorized actions with high impact on confidentiality, integrity, and availability. The exploit requires local access and no user interaction. The vulnerability has been publicly disclosed, but the vendor has not issued any response or patch. No known exploits are currently observed in the wild.

Successful exploitation can lead to improper access control bypass in the kernel driver, potentially allowing a local attacker to perform unauthorized actions that compromise system confidentiality, integrity, and availability. The attack requires local access and limited privileges but does not require user interaction.

No official patch or remediation is currently available from the vendor, who has not responded to the disclosure. Users should restrict local access to trusted users only and monitor for suspicious local activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.