PT-2022-7670 · Realtek · Realtek Rtsuer Driver

Published 2022-05-05 · Updated 2024-11-04 · CVE-2022-25477

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Realtek RtsPer driver for PCIe Card Reader versions prior to 10.0.22000.21355 Realtek RtsUer driver for USB Card Reader versions prior to 10.0.22000.31274

Description The issue is related to insufficient protection of registration data in the Realtek SD card reader drivers, specifically RtsPer.sys and RtsUer.sys. This weakness can be exploited to gain access to driver logs, which contain addresses of kernel mode objects, thereby weakening KASLR.

Recommendations For Realtek RtsPer driver for PCIe Card Reader versions prior to 10.0.22000.21355, update to version 10.0.22000.21355 or later. For Realtek RtsUer driver for USB Card Reader versions prior to 10.0.22000.31274, update to version 10.0.22000.31274 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2024-08887

CVE-2022-25477

Affected Products

Realtek Rtsuer Driver

References · 14

• https://realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-25477 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08887 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-25477 · Security Note
• https://github.com/zwclose/realteksd · Note
• https://zwclose.github.io/2024/10/14/rtsper1.html · Note
• https://twitter.com/IntCyberDigest/status/1853448372318863715 · Twitter Post
• https://gist.github.com/zwclose/feb16f1424779a61cb1d9f6d5681408a · Note
• https://securitylab.ru/news/553185.php · Note
• https://t.me/cvenotify/91598 · Telegram Post
• https://twitter.com/HackingTeam777/status/1852115972573864344 · Twitter Post
• https://feedly.com/cve/CVE-2022-25477 · Note
• http://realtek.com · Note
• https://t.me/cybersecuritytechnologies/11344 · Telegram Post