João Leko Monteiro

**Name of the Vulnerable Software and Affected Versions** EnTech Taiwan TVicPort Product version 4.0 **Description** An issue in the `TVicPort64.sys` component allows attackers to escalate privileges by sending crafted IOCTL 0x80002008 requests. This can lead to a kernel takeover via a Bring Your Own Vulnerable Driver (BYOVD) attack, where a legitimate but vulnerable driver is installed to execute malicious code in the kernel mode. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.