CVE-2024-55414

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55414
A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which allows low-privileged users to mapping physical memory via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55414/CVE-2024-55414_SmSerl64.sys_README.md
https://us.motorola.com/
Configurations

No configuration.

History

08 Jan 2025, 16:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-77
Summary
  • (es) Existe una vulnerabilidad en driver SmSerl64.sys en Motorola SM56 Modem WDM Driver v6.12.23.0 que permite a los usuarios con poco nivel de privilegios mapear la memoria física a través de solicitudes IOCTL especialmente manipuladas. Esto se puede aprovechar para la escalada de privilegios, la ejecución de código con privilegios elevados y la divulgación de información. Estos controladores firmados también se pueden utilizar para eludir la política de firma de controladores de Microsoft y así implementar código malicioso.

07 Jan 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-07 18:15

Updated : 2025-01-08 16:15

NVD link : CVE-2024-55414

Mitre link : CVE-2024-55414

CVE.ORG link : CVE-2024-55414

JSON object : View

Products Affected

No product.

CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')