important · Physical — Windows
AOMEI Backupper lets an unprivileged Windows user rewrite the system disk and install pre-OS UEFI code.
Affects
AOMEI Backupper, Windows backup and disk-cloning software that installs the amwrtdrv.sys kernel driver.
Its world-accessible driver performs unrestricted physical-disk operations without checking the caller’s token.
Detail and 3 sources
Published code demonstrates a GPT and UEFI-payload chain to pre-OS execution when Secure Boot is disabled; no corrected AOMEI release was established.