CVE-2023-31096

Name of the Vulnerable Software and Affected Versions Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver versions through 2.2.100.1

Description An issue exists in the Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver (AGRSM64.sys) that allows for local privilege escalation to SYSTEM privileges. This is achieved through a stack overflow in the RTLCopyMemory function, accessible via the IOCTL 0x1b2150. An attacker with medium-integrity process privileges can exploit this to gain SYSTEM-level access. This can also be used to bypass kernel-level protections like AV or PPL, as exploit code executes with high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver) ransomware campaigns.

Recommendations Versions prior to 2.2.100.1 should be updated.