EaseUS Todo Backup Privilege Validation Vulnerability in eudskacs.sys Driver Allowing Arbitrary Disk I/O Operations

A vulnerability exists in the eudskacs.sys driver, specifically in version 20250328, which is included with EaseUS Todo Backup 1.2.0.1. The driver does not properly validate privileges for input/output requests related to reading and writing operations. This flaw enables a local, low-privileged attacker to execute arbitrary raw disk read and write commands. The consequences of this vulnerability include unauthorized access to sensitive information, potential denial of service, and local privilege escalation.

Impact

Exploitation of this vulnerability could allow a low-privileged user to read arbitrary system files, such as the SAM and SYSTEM hives, leading to unauthorized information disclosure. Additionally, the vulnerability could be used to cause a denial of service or to escalate privileges locally.