PEAK-System Driver Information Disclosure Vulnerability in PCANFD_ADD_FILTERS IOCTL

A time-of-check time-of-use (TOCTOU) information disclosure vulnerability has been identified in the PEAK-System Driver. This issue arises from improper locking mechanisms when handling the PCANFD_ADD_FILTERS IOCTL, allowing local attackers to disclose sensitive information. Exploitation of this vulnerability requires low-privileged code execution on the target system. Furthermore, this flaw could be leveraged, in conjunction with other vulnerabilities, to execute arbitrary code within the kernel context.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, with the potential for local attackers to execute arbitrary code in the kernel context.

Remediation

Users can upgrade to PEAK-System Driver version 8.19.0 to address this vulnerability.