QwikSec

Security Database

CVE

CWE

Training

CVE-2021-36923

Published: Nov 2, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.sentinelone.com/resources/category/report/

x_refsource_MISC

https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.