CVE-2026-80117: Exposed IOCTL with Insufficient Access Control in PassMark Software PerformanceTest
Description
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to issue arbitrary IN and OUT instructions to any x86 I/O port due to missing allowlist or port validation on exposed IOCTLs. Attackers can obtain a device handle and write to sensitive ports including the PS/2 controller port, CPU reset ports, CMOS configuration ports, and interrupt controller ports to cause an immediate system reset or other hardware-level manipulation from a standard user account.
CVSS v4.0
Score 6.9medium
Affected software
PassMark Software
PerformanceTest
PassMark Software
BurnInTest
PassMark Software
OSForensics
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability exists in DirectIo64.sys used by PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016. The exposed IOCTL interface does not enforce an allowlist or validate port access, enabling local attackers with standard user privileges to issue arbitrary IN and OUT instructions to any x86 I/O port. This includes sensitive ports like the PS/2 controller, CPU reset, CMOS configuration, and interrupt controller ports, potentially causing immediate system resets or other hardware-level effects.
Potential Impact
Local users can escalate privileges by manipulating hardware ports directly, potentially causing system resets or other hardware-level disruptions. This can affect system stability and security by allowing unauthorized hardware control from a non-administrative account.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-25T19:56:44.777Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9b0ffaacd9273b490d78b6
Added to database: 09/04/2026, 18:37:46 UTC
Last enriched: 10/02/2026, 15:43:29 UTC
Last updated: 10/18/2026, 06:48:20 UTC
Views: 81
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.