Lucene search

MitreCVE-2022-25478

HistoryJul 02, 2024 - 7:15 p.m.

CVE-2022-25478

2024-07-0219:15:11

mitre

web.nvd.nist.gov

vulnerability

realtek

rtsper

rtsuer

pcie

usb

card reader

pci configuration space

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.0%

JSON

Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 provides read and write access to the PCI configuration space of the device.

Affected configurations

Nvd

Node

realtekrtsperRange<10.0.22000.21355

realtekrtsuerRange<10.0.22000.31274

VendorProductVersionCPE
realtekrtsper*cpe:2.3:a:realtek:rtsper:*:*:*:*:*:*:*:*
realtekrtsuer*cpe:2.3:a:realtek:rtsuer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
realtek	rtsper	*	cpe:2.3:a:realtek:rtsper::::::::
realtek	rtsuer	*	cpe:2.3:a:realtek:rtsuer::::::::

References

realtek.com

gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a

www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

Percentile

5.0%

JSON

Related for CVE-2022-25478