PT-2026-4997 · Idt+1 · Idt Wdm+1

Manuel Alvarez · Publicado 2026-01-27 · Atualizado 2026-01-27 · CVE-2020-36974

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Realtek Andrea RT Filters version 1.0.64.7

Description The Realtek Andrea RT Filters software contains a flaw due to an unquoted service path. This can allow local users to potentially execute arbitrary code with elevated system privileges. The vulnerable path is located at 'C:Program FilesIDTWDMAESTSr64.exe'. Exploitation involves injecting malicious code that executes during service startup or system reboot.

Recommendations Apply quotes to the service path to prevent unauthorized code execution.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

BDU:2026-02487

CVE-2020-36974

Produtos afetados

Idt Wdm

Realtek Andrea Rt Filters

Referências · 5

• 🔥 https://exploit-db.com/exploits/49158 · Exploit
• https://vulncheck.com/advisories/realtek-andrea-rt-filters-aertsrexe-unquoted-service-path · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36974 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-02487 · Nota de Segurança
• https://realtek.com/en · Nota