Privilege Escalation Risk in RW-5100 Driver Installer for Windows

CVE-2017-2191

What is CVE-2017-2191?

The RW-5100 driver installer for Windows 7 and Windows 8.1 contains a vulnerability that permits an attacker to exploit an untrusted search path. By placing a malicious DLL in a directory not adequately controlled, an attacker can gain elevated privileges when the installer is executed. This exploitation could enable unauthorized actions on the host system, present a significant security risk to system integrity.

References