PT-2025-3115 · Motorola+1 · Motorola Sm56 Modem Wdm Driver+1
Heyheysky
·
Published
2025-01-06
·
Updated
2026-02-01
·
CVE-2024-55414
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Motorola SM56 Modem WDM Driver version 6.12.23.0
Description
A vulnerability exists in the SmSerl64.sys driver, allowing low-privileged users to map physical memory via specially crafted IOCTL requests. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. The signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.
Recommendations
For Motorola SM56 Modem WDM Driver version 6.12.23.0, consider disabling the SmSerl64.sys driver until a patch is available to prevent exploitation. Restrict access to the IOCTL requests to minimize the risk of privilege escalation and code execution. Avoid using the driver for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Heap Based Buffer Overflow
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Motorola Sm56 Modem Wdm Driver
Windows