Privilege Escalation Vulnerability in Realtek USB Utility Driver
CVE-2021-36922

7.8HIGH

Key Information:

Vendor

Realtek

Status
Rtsupx Usb Utility Driver
Vendor
CVE Published:
2 November 2021

What is CVE-2021-36922?

The Realtek RtsUpx USB Utility Driver contains a vulnerability that allows local low-privileged users to gain unauthorized access to USB devices. This security flaw can be exploited through a crafted Device IO Control packet, potentially leading to code execution, denial of service, and information disclosure. Users are advised to upgrade to the latest version to mitigate this risk.

References

https://www.sentinelone.com/resources/category/report/
x_refsource_MISC
https://www.realtek.com/images/safe-report/Realtek_RtsUpx...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.