CVE-2017-9758

Опубликовано: 10 нояб. 2017

Источник: nvd

CVSS3: 7.4

CVSS2: 5.8

EPSS Низкий

Описание

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."

Ссылки

http://www.securityfocus.com/bid/101700
Third Party Advisory
VDB Entry
https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc
Exploit
Technical Description
Third Party Advisory
https://www.kb.cert.org/vuls/id/446847
Third Party Advisory
US Government Resource
https://zeroday.hitcon.org/vulnerability/ZD-2017-00386
Third Party Advisory
http://www.securityfocus.com/bid/101700
Third Party Advisory
VDB Entry
https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc
Exploit
Technical Description
Third Party Advisory
https://www.kb.cert.org/vuls/id/446847
Third Party Advisory
US Government Resource
https://zeroday.hitcon.org/vulnerability/ZD-2017-00386
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:savitech-ic:savitech_driver:*:*:*:*:*:*:*:*

Версия до 2.8.0.3 (исключая)

EPSS

Процентиль: 65%

0.005

Низкий

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-vhg4-6qhj-g32h