This vulnerability affects PowerISO 9.3.0.0 specifically in the kernel driver located at C:\Windows\System32\drivers\scdemu.sys. The issue is improper privilege management, which can be exploited locally to escalate privileges. The CVSS 4.0 score is 8.5, indicating high severity, with low attack complexity and no user interaction required. The vendor was notified but has not provided any fix or mitigation guidance. Exploit code is publicly available, but no known exploitation in the wild has been reported.

Successful exploitation of this vulnerability could allow a local attacker to gain elevated privileges on the affected system, potentially leading to unauthorized actions at a higher privilege level. Since the exploit is publicly available, the risk of exploitation is increased. However, exploitation requires local access.

No official fix or patch is currently available from the vendor. Users should restrict local access to trusted individuals and monitor for suspicious activity related to PowerISO. Check the vendor's channels regularly for any future updates or patches addressing this issue.