What’s Vulnerable › Vulnerabilities

CVE-2020-15480

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-08-07 · updated 2026-06-17

Description

An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers (MSRs). This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys.

Affected products

• Passmark Burnintest: through 9.1
• Passmark Osforensics: through 7.1
• Passmark Performancetest: through 10.0

References

• https://github.com/eset/vulnerability-disclosures
• https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15480/CVE-2020-15480.md
• https://www.passmark.com/forum/index.php
• https://www.passmark.com/support/index.php
• https://github.com/eset/vulnerability-disclosures
• https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15480/CVE-2020-15480.md
• https://www.passmark.com/forum/index.php
• https://www.passmark.com/support/index.php

Get alerted when CVE-2020-15480 or the next vulnerability affects your stack