This flaw is a kernel driver oversight that allows contextless IOCTL invocations to terminate processes that otherwise rely on third‑party protection mechanisms. Because the driver accepts requests without ensuring the caller possesses the required privileges, any process that can load the driver can instruct the kernel to kill a protected process. The effect is a denial of service for the protected processes or applications, potentially crippling critical services. This vulnerability aligns with the CWE‑269 pattern of insufficient caller validation in kernel code.

The impacted product is STProcessMonitor version 11.11.4.0, part of the Safetica Application suite. No other vendor or product information is listed. The flaw exists in the driver that ships with this specific release.

The vulnerability can be leveraged by any entity capable of loading the vulnerable driver, which may be achieved by an attacker who has local code execution or can elevate to a privileged account. Once the driver is loaded, the crafted IOCTL (0xB822200C) simply instructs the kernel to terminate a protected target, requiring no further authentication. The CVSS score is 5.5, indicating moderate severity, while EPSS data is not available, and the flaw is not listed in CISA's KEV catalog, so the exact exploitation likelihood is unknown. However, the low barrier to exploitation coupled with the severe availability impact yields a high risk for systems that rely on the affected driver.