Realtek RtsUpx Usb Utility Driver 访问控制错误漏洞

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China.An access control error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which stems from the product's failure to device's IO control packet for permission detection. An...

CVE-2021-36925: Undefined Security Weakness

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a...

CVE-2021-36922: Undefined Security Weakness

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a crafted Device IO Control packet to a...

Realtek RtsUpx Usb Utility Driver 资源管理错误漏洞

Realtek RtsUpx Usb Utility Driver is a Usb utility driver from Realtek Semiconductor China.A resource management error vulnerability exists in the Realtek RtsUpx USB Utility Driver for Camera Hub Audio, which stems from the product's handling of IO control packets without proper memory boundary...

PT-2021-21411

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve a pool overflow, leading to Escalation of Privileges, Denial of Service, and Code Execution...

PT-2021-21410

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions, leading to Escalation...

PT-2021-21412

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve arbitrary read or write operations from/to physical memory, leading to Escalation of...

CVE-2021-36923: Undefined Security Weakness

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosur...

PT-2021-21409

Name of the Vulnerable Software and Affected Versions Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio versions 1.14.0.0 and earlier Description The issue allows local low-privileged users to achieve unauthorized access to USB devices, potentially leading to escalation of privileges, denial...

SUSE: Security Advisory (SUSE-SU-2020:2879-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Realtek Jungle SDK Command Injection (CVE-2021-35394)

A command injection vulnerability exists in Realtek Jungle SDK. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Realtek Jungle SDK Buffer Overflow (CVE-2021-35392; CVE-2021-35393; CVE-2021-35395)

A buffer overflow vulnerability exists in Realtek Jungle SDK. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

A week in security (August 23 – August 29)

Last week on Malwarebytes Labs: Patch now! Microsoft Exchange is being attacked via ProxyShell Realtek-based routers, smart devices are being gobbled up by a voracious botnet Criminals exploited weak checks and old tech to pull off vast COVID benefit fraud Mice “taking over the world!”, one Windo...

VulnCheck KEV: CVE-2021-35394

RealTek Jungle SDK contains multiple memory corruption vulnerabilities which can allow an attacker to perform remote code execution...

Realtek-based routers, smart devices are being gobbled up by a voracious botnet

A few weeks ago we blogged about a vulnerability in home routers that was weaponized by the Mirai botnet just two days after disclosure. Mirai hoovers up vulnerable Internet of Things IoT devices and adds them to its network of zombie devices, which can then be used to launch huge Distributed...

VulnCheck KEV: CVE-2021-35395

Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service DoS...

Attackers Actively Exploiting Realtek SDK Flaws

Threat actors zeroing in on command injection vulnerabilities reported in Realtek chipsets just days after multiple flaws were discovered in the software developers kits SDK deployed across at least 65 separate vendors. On Aug. 16 multiple Realtek vulnerabilities were disclosed by IoT Inspector...

Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices

Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits SDKs accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors. The flaws, which affect Realtek SDK v2.x, Realtek "Jungle" SDK...

The vulnerability in the web interface for managing Realtek SDK devices allows a hacker to execute arbitrary code.

The vulnerability in the Realtek SDK’s web interface for controlling development tools is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the UPnP protocol implementation in the WiFi Simple Config (wscd) server from the Realtek SDK allows a hacker to execute arbitrary code.

The vulnerability of the UPnP protocol implementation in the WiFi Simple Config wscd server developed with Realtek SDK arises due to an overflow in the buffer in the “cull”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created SSDP NOTIFY messag...