CVE-2022-25478: High severity Realtek RtsPer vulnerability
Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 provides read and write access to the PCI configuration space of the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Realtek RtsPer (RtsPer.sys)to a version that resolves this vulnerability.Fixed in 10.0.22000.21355 - Upgrade
Upgrade
Realtek RtsUer (RtsUer.sys)to a version that resolves this vulnerability.Fixed in 10.0.22000.31274
Event History
Frequently Asked Questions
What is the severity of CVE-2022-25478?
CVE-2022-25478 has a critical severity level due to its potential to allow unauthorized read and write access to the device's PCI configuration space.
How do I fix CVE-2022-25478?
To fix CVE-2022-25478, update the Realtek RtsPer driver to version 10.0.22000.21355 or higher and the Realtek RtsUer driver to version 10.0.22000.31274 or higher.
What devices are affected by CVE-2022-25478?
CVE-2022-25478 affects devices using the Realtek RtsPer driver for PCIe Card Reader and Realtek RtsUer driver for USB Card Reader.
What are the potential risks associated with CVE-2022-25478?
The risks of CVE-2022-25478 include unauthorized access to sensitive data and control over the device, leading to further attacks.
When was CVE-2022-25478 disclosed?
CVE-2022-25478 was disclosed as part of a series of security advisories by Realtek, highlighting vulnerabilities in their drivers.