Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover
![Image](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRLHY9novLYaataPSjeUmgFhnZYZ9H4uYANfgZVVOXO7LxfjPXZjB9NnmZU4q-q5WhYAxIxll_cdWCohRNY4CYj6taDKuQAAsimM858kBJ5gn3tbyJkTm2xAjO8X7hDdn7ygj2GwCRRK3xwJijGyvtZXWfCOhPo9PHjt3IBwLIRQf2Jp40S2EJe5Foeoc_/s728-rw-ft-e30/windows.jpg)
Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover Nov 02, 2023 As many as 34 unique vulnerable Windows Driver Model (WDM) and Windows Driver Frameworks (WDF) drivers could be exploited by non-privileged threat actors to gain full control of the devices and execute arbitrary code on the underlying systems. "By exploiting the drivers, an attacker without privilege may erase/alter firmware, and/or elevate [operating system] privileges," Takahiro Haruyama, a senior threat researcher at VMware Carbon Black, said. The research expands on previous studies, such as ScrewedDrivers and POPKORN that utilized symbolic execution for automating the discovery of vulnerable drivers. It specifically focuses on drivers that contain firmware access through port I/O and memory-mapped I/O. The names of some of the vulnerable drivers include AODDriver.sys, ComputerZ.sys, dellbios.sys, GEDevDrv.sys, GtcKmdfBs.sys, IoAccess.sys, kerneld.amd64,