Lucene search

MitreCVE-2022-25477

HistoryJul 02, 2024 - 7:15 p.m.

CVE-2022-25477

2024-07-0219:15:11

CWE-532

mitre

web.nvd.nist.gov

realtek

rtsper

rtsuer

driver logs

kernel mode

kaslr

cve-2022-25477

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

15.8%

JSON

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 leaks driver logs that contain addresses of kernel mode objects, weakening KASLR.

Affected configurations

Nvd

Node

realtekrtsperRange<10.0.22000.21355

realtekrtsuerRange<10.0.22000.31274

VendorProductVersionCPE
realtekrtsper*cpe:2.3:a:realtek:rtsper:*:*:*:*:*:*:*:*
realtekrtsuer*cpe:2.3:a:realtek:rtsuer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realtek	rtsper	*	cpe:2.3:a:realtek:rtsper::::::::
realtek	rtsuer	*	cpe:2.3:a:realtek:rtsuer::::::::

References

realtek.com

gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a

www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

Percentile

15.8%

JSON

Related for CVE-2022-25477