PT-2024-25160 · Realtek Semiconductor · Realtek Lo Driver

Published 2024-05-22 · Updated 2025-03-13 · CVE-2024-33224

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Realtek lO Driver version 1.008.0823.2017

Description An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Recommendations For Realtek lO Driver version 1.008.0823.2017, consider disabling the rtkio64.sys component as a temporary workaround until a patch is available. Restrict access to the vulnerable component to minimize the risk of exploitation. Avoid using crafted IOCTL requests in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2024-33224

Affected Products

Realtek Lo Driver

References · 8

• 🔥 https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33224 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-33224 · Security Note
• https://t.me/cvenotify/80717 · Telegram Post
• https://t.me/cvenotify/114601 · Telegram Post
• https://t.me/cvenotify/92077 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1793372094664937611 · Twitter Post
• https://twitter.com/CVEnew/status/1793384181101207701 · Twitter Post
• https://t.me/cvenotify/80762 · Telegram Post