CVE-2022-21742 MEDIUM

CVE-2022-21742: Realtek USB FE/1GbE/2.5GbE/5GbE NIC Family - Buffer Overflow

Vendor Realtek
Product USB FE/1GbE/2.5GbE/5GbE NIC Family
Weakness CWE-120
Published June 20, 2022
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services.

Key dates

02Disclosure timeline

June 20, 2022 CVE published
September 17, 2024 Record updated