Takahiro Hauryama, a senior threat researcher at VMware Carbon Black, identified and documented thirty-four vulnerabilities in drivers for legacy devices in the Windows Driver Model (WDM) and Window Driver Framework (WDF). Some of these vulnerabilities belong to, but are not limited to, AMD, Intel, Nvidia, Dell, and Phoenix Technologies.
These vulnerabilities reside in either software, BIOS, or the OS drivers for legacy devices, leaving a system open to varying attack vectors that allow nefarious actors full system control so they can conduct any number of attacks, like adding malicious code, altering system privileges, and erasing some I/O instructions, among other possibilities.
