A privilege management flaw in the Moore Threads MTT S80 driver package could allow a local attacker to elevate privileges or perform unauthorized operations.

This flaw exists in the IOCTL Handler of the mtdispkm64.sys library, specifically within the sub_140006F0C function. The vulnerability enables improper privilege management, which can be exploited by an authenticated local user to perform actions beyond their intended permission level.

With a CVSS score of 8.8, this vulnerability presents a high risk to organizational security. Successful exploitation could allow a standard user to gain elevated privileges, leading to unauthorized access to sensitive data, modification of system configurations, or persistence mechanisms that are difficult to detect.

Immediate Action: Monitor the vendor support portal for official security patches and apply them as soon as they are released.

Proactive Monitoring: Audit user activity logs to identify any attempts to execute unauthorized administrative functions.

Compensating Controls: Implement the principle of least privilege by restricting user access to the hardware components and drivers on critical workstations.

Public Exploit Available: Unknown

The risk of privilege escalation makes this a priority for any system utilizing the affected hardware. Until the vendor releases a patch, security teams should focus on hardening the local environment and ensuring that only trusted users have the ability to interact with the system driver layer.