Description

An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious user may potentially exploit this vulnerability by waiting for an administrator to launch the application and attach to the process to elevate privileges on the system.

Related CPE's

a

dell

realtek_high_definition_audio_driver

7

h

dell

alienware_m15_ryzen_edition_r5

-

h

dell

g15_5515

-

h

dell

alienware_m15_r6

-

h

dell

g15_5510

-

h

dell

g15_5511

-

h

dell

alienware_area_51m_r1

-

h

dell

alienware_area_51m_r2

-

h

dell

alienware_aurora_r10

-

h

dell

alienware_aurora_r11

-

h

dell

alienware_aurora_r12

-

h

dell

alienware_aurora_r8

-

h

dell

alienware_aurora_r9

-

h

dell

alienware_m15_r1

-

h

dell

alienware_m15_r2

-

h

dell

alienware_m15_r3

-

h

dell

alienware_m15_r4

-

h

dell

alienware_m17_r1

-

h

dell

alienware_m17_r2

-

h

dell

alienware_m17_r3

-

h

dell

alienware_m17_r4

-

h

dell

g5_5000

-

h

dell

g5_5090

-

h

dell

g5_5590

-

h

dell

g7_7590

-

h

dell

g7_7790

-

h

dell

g7_7500

-

h

dell

g7_7700

-

h

dell

alienware_aurora_r13

-

h

dell

alienware_x15_r1

-

h

dell

alienware_x17_r1

-

h

dell

g3_3590

-

h

dell

g3_3500

-

h

dell

g5_5500

-

References

https://www.dell.com/support/kbdoc/en-us/000205721/dsa-2022-316-dell-client-security-update-for-a-realtek-high-definition-audio-driver-vulnerability

Vendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-Other

[email protected]

Secondary
CWE-285

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.3 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-01-26T21:15:42.883

2 years ago

Last modified

2023-11-07T03:48:37.990

1 year ago