Overview
- Description
- A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user.
- Source
- cve@mitre.org
- NVD status
- Awaiting Analysis
Risk scores
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Social media
- Hype score
- Not currently trending
⚠️ Realtek Driver Exploits: A Chain Reaction 💽The combination of vulnerabilities (CVE-2024-40431 & CVE-2022-25479) in the Realtek RtsPer driver presents a significant escalation of privilege risk. Immediate patching or driver removal is recommended for affected systems,
@IntCyberDigest
4 Nov 2024
2567 Impressions
6 Retweets
17 Likes
6 Bookmarks
1 Reply
1 Quote
Realtek SD card reader driver flaws impact laptops from Dell, Lenovo, HP, and MSI. Vulnerabilities like CVE-2024-40431 enable kernel memory access, risking system compromise. Affected users should update drivers to version 10.0.26100.21374 or higher. #infosec #cybersecurity ht
@paramdhagia
3 Nov 2024
30 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Realtek SD card reader driver flaws impact laptops from Dell, Lenovo, HP, and MSI. Vulnerabilities like CVE-2024-40431 enable kernel memory access, risking system compromise. Affected users should update drivers to version 10.0.26100.21374 or higher. #infosec #cybersecurity ht
@paramdhagia
3 Nov 2024
23 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Realtek SD card reader driver flaws impact laptops from Dell, Lenovo, HP, and MSI. Vulnerabilities like CVE-2024-40431 enable kernel memory access, risking system compromise. Affected users should update drivers to version 10.0.26100.21374 or higher. #infosec #cybersecurity ht
@paramdhagia
3 Nov 2024
47 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
Realtek SD card reader driver flaws impact laptops from Dell, Lenovo, HP, and MSI. Vulnerabilities like CVE-2024-40431 enable kernel memory access, risking system compromise. Affected users should update drivers to version 10.0.26100.21374 or higher. #infosec #cybersecurity ht
@paramdhagia
3 Nov 2024
41 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Realtek SD card reader driver flaws impact laptops from Dell, Lenovo, HP, and MSI. Vulnerabilities like CVE-2024-40431 enable kernel memory access, risking system compromise. Affected users should update drivers to version 10.0.26100.21374 or higher. #infosec #cybersecurity ht
@paramdhagia
3 Nov 2024
46 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
Realtek SD card reader driver flaws impact laptops from Dell, Lenovo, HP, and MSI. Vulnerabilities like CVE-2024-40431 enable kernel memory access, risking system compromise. Affected users should update drivers to version 10.0.26100.21374 or higher. #infosec #cybersecurity h
@paramdhagia
3 Nov 2024
5 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
#exploit 1. CVE-2024-39205: Pyload RCE with js2py sandbox escape https://t.co/vbwpTCCJmy 2. CVE-2024-40431, CVE-2022-25477 - 25480: Vulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver) https://t.co/ea8vmfaCjo
@HackingTeam777
31 Oct 2024
188 Impressions
0 Retweets
3 Likes
1 Bookmark
0 Replies
0 Quotes
#exploit 1. CVE-2024-39205: Pyload RCE with js2py sandbox escape https://t.co/91FstISBB5 2. CVE-2024-40431, CVE-2022-25477 - 25480: Vulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver) https://t.co/cNQrOXpH3r
@ksg93rd
27 Oct 2024
50 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
#exploit 1. CVE-2024-39205: Pyload RCE with js2py sandbox escape https://t.co/JCxNSOwPMB 2. CVE-2024-40431, CVE-2022-25477 - 25480: Vulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver) https://t.co/L3TC5IgWT9
@un_exceptional
27 Oct 2024
36 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
#exploit 1. CVE-2024-39205: Pyload RCE with js2py sandbox escape https://t.co/xPx0YWbXQ9 2. CVE-2024-40431, CVE-2022-25477 - 25480: Vulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver) https://t.co/hP9Paw68cX 3. CVE-2024-1512: SQLI in MasterStudy LMS WP Plugin… https:/
@akaclandestine
27 Oct 2024
1669 Impressions
13 Retweets
36 Likes
13 Bookmarks
0 Replies
0 Quotes
Yet another successful exploit with @f00fc7c800. Using CVE-2024-40431+CVE-2022-25479 from @zwclose, an NT leak we found on the stack and a trick I learned from @scwuaptx at Hexacon, we managed to get an EOP on Realtek driver 10.0.22000.21350 :) - https://t.co/7vDqqTdZ4O https://t
@reubensammut
9611 Impressions
42 Retweets
129 Likes
62 Bookmarks
3 Replies
1 Quote