PT-2026-2997 · Realtek · Realtek Sdk

Publicado 2026-01-15 · Atualizado 2026-01-23 · CVE-2026-22916

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions versions prior to 2.3

Description An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration. The issue allows triggering critical system functions without proper restrictions.

Recommendations Update to a version prior to 2.3.

Correção

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2026-22916

Produtos afetados

Realtek Sdk

Referências · 9

• https://first.org/cvss/calculator/3.1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-22916 · Nota de Segurança
• https://sick.com/psirt · Aviso do Fabricante
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.json · Aviso do Fabricante
• https://t.me/cveNotify/149682 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2012490372367225146 · Publicação no Twitter
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf · Aviso do Fabricante
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Nota
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Nota