CVE-2024-11857: Realtek Bluetooth HCI Adaptor - Privilege Escalation
Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary file deletion to privilege escalation.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11857?
CVE-2024-11857 is considered a high-severity vulnerability due to its potential for local attackers to delete arbitrary files.
How do I fix CVE-2024-11857?
To fix CVE-2024-11857, ensure that you apply the latest security updates provided by Realtek for the Bluetooth HCI Adaptor.
Who is affected by CVE-2024-11857?
CVE-2024-11857 affects users of the Realtek Bluetooth HCI Adaptor, particularly in environments where local attackers may have standard privileges.
What does the Link Following vulnerability in CVE-2024-11857 allow attackers to do?
The Link Following vulnerability in CVE-2024-11857 allows attackers to create symbolic links leading to the deletion of arbitrary files.
Can CVE-2024-11857 be exploited remotely?
CVE-2024-11857 cannot be exploited remotely as it requires local access to the affected system.