Description
A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub_1105C of the file BS_HWMIO64_W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where condition. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-09-21
Score: 9.3 Critical
EPSS: n/a
KEV: No
Impact: Local arbitrary code execution
Action: Immediate Patch
AI Analysis

Impact

The flaw is a write‑what‑where bug in the IOCTL handler of BS_HWMIO64_W10.sys, allowing a local user to write to an arbitrary physical address via the PhysicalAddress argument. This can lead to privilege escalation or arbitrary code execution on the compromised system, affecting confidentiality, integrity, and availability.

Affected Systems

BioStar Temperature Monitor Utility version 1.2.1806.2200 on Windows systems contains the vulnerable sub_1105C function. Only systems running this exact build are impacted; newer releases or other vendors are not listed as affected.

Risk and Exploitability

With a CVSS score of 9.3, this vulnerability is deemed critical. The EPSS score is not available, and the vulnerability is not present in the CISA KEV catalog. The known exploit requires local execution, which means that an attacker with local access can abuse the flaw, and the public disclosure indicates that it can be leveraged. The lack of a vendor response suggests that the risk remains unresolved until a patch is released.

Generated by OpenCVE AI on September 21, 2026 at 06:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the vendor’s latest release of BioStar Temperature Monitor Utility that removes or protects the vulnerable IOCTL.
  • Restrict the driver and utility’s execution rights so only trusted administrators can run them.
  • If a patch is unavailable, deny local accounts from accessing the driver by disabling BS_HWMIO64_W10.sys or blocking the specific IOCTL using group policy.

Generated by OpenCVE AI on September 21, 2026 at 06:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 21 Sep 2026 05:00:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub_1105C of the file BS_HWMIO64_W10.sys of the component IOCTL Handler. Such manipulation of the argument PhysicalAddress leads to write-what-where condition. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where
First Time appeared Biostar
Biostar temperature Monitor Utility
Weaknesses CWE-119
CWE-123
CPEs cpe:2.3:a:biostar:temperature_monitor_utility:*:*:*:*:*:*:*:*
Vendors & Products Biostar
Biostar temperature Monitor Utility
References
Metrics cvssV2_0

{'score': 6.8, 'vector': 'AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 8.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Biostar Temperature Monitor Utility
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-21T04:45:07.782Z

Reserved: 2026-09-20T20:02:48.391Z

Link: CVE-2026-94142

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-21T05:16:42.053

Modified: 2026-09-21T05:16:42.053

Link: CVE-2026-94142

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-21T06:30:09Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-123

    Write-what-where Condition