PT-2026-2997 · Realtek · Realtek Sdk

Published 2026-01-15 · Updated 2026-01-23 · CVE-2026-22916

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions versions prior to 2.3

Description An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration. The issue allows triggering critical system functions without proper restrictions.

Recommendations Update to a version prior to 2.3.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-22916

Affected Products

Realtek Sdk

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-22916 · Security Note
• https://sick.com/psirt · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.json · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf · Vendor Advisory
• https://first.org/cvss/calculator/3.1 · Note
• https://t.me/cveNotify/149682 · Telegram Post
• https://twitter.com/CVEnew/status/2012490372367225146 · Twitter Post
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note