Synaptics Audio Driver prior 9.0.278.x/9.0.282.x/9.0.285.x on Windows CxUIUSvc64.exe access control

Summaryinfo

A vulnerability classified as critical was found in Synaptics Audio Driver on Windows. The affected element is an unknown function of the file CxUIUSvc64.exe. Executing a manipulation can lead to access control. This vulnerability only affects products that are no longer supported by the maintainer. The identification of this vulnerability is CVE-2024-9157. The attack can only be executed locally. There is no exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as critical was found in Synaptics Audio Driver on Windows. This vulnerability affects an unknown function of the file CxUIUSvc64.exe. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

** UNSUPPORTED WHEN ASSIGNED **  A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who are still running this product understand that the product is End-of-Life and should be removed. For more information on this, refer to the CVE Record’s reference information.

The advisory is shared for download at synaptics.com. This vulnerability was named CVE-2024-9157 since 09/24/2024. The exploitation appears to be easy. The attack needs to be approached locally. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.

The vulnerability scanner Nessus provides a plugin with the ID 232622 (KB5053887: Windows Server 2012 R2 Security Update (March 2025)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 9.0.278.x, 9.0.282.x or 9.0.285.x eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (232622). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Hardware Driver Software

Vendor

• Synaptics

Name

• Audio Driver

Support

• end of life

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion