← Back to driver explorer
Driver intelligenceVulnerableVerified
snxpsamd.sys
SUNIX Serial Driver x64 version 10.1.0.0 is affected by CVE-2024-55412. This exact signed build exposes raw I/O-port operations to low-privilege callers through IOCTLs including 0x9C403C04 and 0x9C403C08. An attacker can use the unrestricted port read/write primitives to disclose information, tamper with privileged hardware state, and elevate privileges.
Known samples 1
0 recorded TRUE · 0 recorded FALSE · 1 unknown for loading despite HVCI. Results apply to individual samples.
snxpsamd.sysSample 1 · HVCI unknown
- MD5
fc673f2b36cc141869db00db309587d2- SHA1
bcab4386a9b39f26ee4ae4672b2e3425337c94aa- SHA256
1eaaa7dd2f187a5f25600f6fc6c8f0b905d9e6aeacd0803643ae58367354a513- Imphash
2219562fa87532a62ce10bd50c4c17be- Authentihash MD5
e7590f6ee66a992893b06dc6f2112008- Authentihash SHA1
fb6a6f9f109159398e6812b4bc81bce43e545e31- Authentihash SHA256
223173a4fcf3c59b84e482303d1368e5ec81ecfa7e5b3af1ae19a8d2080f15ab- Machine
- AMD64
- Version
- 10.1.0.0
- Publisher
- SUNIX Co., Ltd.
Recorded command
sc.exe create snxpsamd type= kernel binPath= C:\\windows\\temp\\snxpsamd.sys && sc.exe start snxpsamdRead and write arbitrary I/O ports · Privileges: User · OS: Windows
Research & references
Acknowledgement: fluffycats31 @fluffycats31