Privilege Escalation Vulnerability in Motorola SM56 Modem Driver
CVE-2024-55414

Currently unrated

Key Information:

Vendor
Motorola
Vendor
CVE Published:
7 January 2025

Summary

A vulnerability exists in the SmSerl64.sys driver of the Motorola SM56 Modem WDM Driver v6.12.23.0. This flaw allows low-privileged users to map physical memory through specially crafted IOCTL requests. Exploiting this vulnerability can lead to privilege escalation, unauthorized code execution with high privileges, and potential information disclosure. Additionally, the use of these signed drivers may enable attackers to circumvent Microsoft’s driver-signing policy to deploy malicious software.

References

https://github.com/heyheysky/vulnerable-driver/blob/maste...
https://us.motorola.com/

Timeline

  • Vulnerability published

.