CVE-2024-55414

EUVD-2024-52769
A vulnerability exits in driver SmSerl64.sys in Motorola SM56 Modem WDM Driver v6.12.23.0, which allows low-privileged users to mapping physical memory via specially crafted IOCTL requests . This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
Windows Releases
Platform
Version
Windows 10
1607 (x64, x86)
KB5073722
1809 (x64, x86)
KB5073723
21H2 (arm64, x64, x86)
KB5073724
22H2 (arm64, x64, x86)
KB5073724
Windows 11
23H2 (arm64, x64)
KB5073455
24H2 (arm64, x64)
KB5074109
25H2 (arm64, x64)
KB5074109
Windows Server 2008
Service Pack 2 (x64, x86)
KB5073700
Service Pack 2 Server Core (x64, x86)
KB5073700
Windows Server 2008 R2
Service Pack 1 (x64)
KB5073699
Service Pack 1 Server Core (x64)
KB5073699
Windows Server 2012
Server Core
KB5073698
Standard
KB5073698
Windows Server 2012 R2
Server Core
KB5073696
Standard
KB5073696
Windows Server 2016
Server Core
KB5073722
Standard
KB5073722
Windows Server 2019
Server Core
KB5073723
Standard
KB5073723
Windows Server 2022
23H2 Server Core
KB5073450
Server Core
KB5073457
Standard
KB5073457
Windows Server 2025
Server Core
KB5073379
Standard
KB5073379
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55414/CVE-2024-55414_SmSerl64.sys_README.md
https://us.motorola.com/