NetSight
IP …
medium6.2

CVE-2022-21742

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function.

Impact

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services.

Affected products

VendorProductAffected versions
RealtekRtl8156 Firmware
from 7.42 through 7.53
from 8.49 through 8.60
from 10.28 before 10.50
RealtekRtl8156b Firmware
from 7.42 through 7.53
from 8.49 through 8.60
from 10.28 before 10.50
RealtekRtl8153 Firmware
from 7.42 through 7.53
from 8.49 through 8.60
from 10.28 before 10.50
RealtekRtl8153b Firmware
from 7.42 through 7.53
from 8.49 through 8.60
from 10.28 before 10.50
RealtekRtl8154 Firmware
from 7.42 through 7.53
from 8.49 through 8.60
from 10.28 before 10.50
RealtekRtl8154b Firmware
from 7.42 through 7.53
from 8.49 through 8.60
from 10.28 before 10.50
RealtekRtl8152b Firmware
from 7.42 through 7.53
from 8.49 through 8.60
from 10.28 before 10.50

Weakness classification

CWE-120

References