CVE-2022-21742

Realtek USB FE/1GbE/2.5GbE/5GbE NIC Family - Buffer Overflow

State: Published
Severity: 6.2 Medium
Published: Jun 20, 2022
Updated: Sep 17, 2024
Reserved: Nov 19, 2021

Description

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services.

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	twcert

Weaknesses

CWE-120 Buffer Overflow

Affected Products

Product	Versions
USB FE/1GbE/2.5GbE/5GbE NIC FamilyRealtek	10.28 through 10.39Affected
USB FE/1GbE/2.5GbE/5GbE NIC FamilyRealtek	8.49 through 8.60Affected
USB FE/1GbE/2.5GbE/5GbE NIC FamilyRealtek	7.42 through 7.53Affected

References

https://www.twcert.org.tw/tw/cp-132-6057-1cd0d-1.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.