CVE-2023-31096
First published: Tue Oct 10 2023(Updated: )
An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL 0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM. This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver) ransomware campaigns.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom Lsi Pci-sv92ex Firmware | <=2.2.100.1 | |
| Broadcom Lsi Pci-sv92ex |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-31096?
The severity of CVE-2023-31096 is high with a score of 7.8.
How does CVE-2023-31096 impact the Broadcom LSI PCI-SV92EX firmware?
CVE-2023-31096 allows local privilege escalation to SYSTEM via a stack overflow in RTLCopyMemory (IOCTL 0x1b2150) in the Broadcom LSI PCI-SV92EX firmware version up to and including 2.2.100.1.
Can an attacker exploit CVE-2023-31096 remotely?
No, CVE-2023-31096 requires local access to exploit the vulnerability.
Is the Broadcom LSI PCI-SV92EX modem vulnerable to CVE-2023-31096?
Yes, the Broadcom LSI PCI-SV92EX modem is vulnerable to CVE-2023-31096 if it is running firmware version up to and including 2.2.100.1.
How can I mitigate the vulnerability in Broadcom LSI PCI-SV92EX firmware?
To mitigate the vulnerability, it is recommended to update the Broadcom LSI PCI-SV92EX firmware to a version higher than 2.2.100.1.
- collector/nvd-api
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/event
- agent/type
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/broadcom
- canonical/broadcom lsi pci-sv92ex firmware
- version/broadcom lsi pci-sv92ex firmware/2.2.100.1
- canonical/broadcom lsi pci-sv92ex