Please note: This website includes an accessibility system. Press Control-F11 to adjust the website to the visually impaired who are using a screen reader; Press Control-F10 to open an accessibility menu.

Realtek Driver Privilege Escalation Vulnerability

Realtek Driver Privilege Escalation Vulnerability

Realtek Driver Privilege Escalation Vulnerability

Lenovo Security Advisory: LEN-65532

Potential Impact: Privilege escalation

Severity: High

Scope of Impact: Industry-wide

CVE Identifier: CVE-2021-36922, CVE-2021-36923, CVE-2021-36924, CVE-2021-36925

 

Summary Description:

Realtek reported a privilege escalation vulnerability in Realtek RtsUpx USB utility driver that could allow a local attacker to execute code with elevated privileges.

 

Mitigation Strategy for Customers (what you should do to protect yourself):

Realtek recommends updating to the driver version (or newer) indicated for your model in the Product Impact section below.

 

Product Impact:

To download the version specified for your product below, follow these steps:

Navigate to the Drivers & Software support site for your product:

  1. Search for your product by name or machine type.
  2. Click Drivers & Software on the left menu panel.
  3. Click on Manual Update to browse by Component type.
  4. Compare the minimum fix version for your product from the applicable product table below with the latest version posted on the support site.

Lenovo also offers tools to assist with update management as an alternative to the manual steps described above. Refer to the following for additional help:

PC Products and Software: https://support.lenovo.com/us/en/solutions/ht504759

Server and Enterprise Software: https://support.lenovo.com/us/en/solutions/lnvo-lxcaupd and https://datacentersupport.lenovo.com/us/en/documents/lnvo-center

 

Click below links to view affected products:

ThinkPad

 

Acknowledgement:

Lenovo thanks Roy Ronen from SentinelOne for reporting this issue.

 

References:

https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf 

 

Revision History:

Revision Date Description
1 2021-11-09 Initial release

For a complete list of all Lenovo Product Security Advisories, click here.

For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on an “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.

 

Product Impact:

ThinkPad

Product Component Minimum Fixed Version
E14 (Type 20RA, 20RB) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E15 (Type 20RD, 20RE) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E480 (Type 20KN, 20KQ) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E485 (Type 20KU) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E490 (Type 20N8, 20N9) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E490s (Type 20NG) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E495 (Type 20NE) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E580 (Type 20KS 20KT) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E585 (Type 20KV) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E590 (Type 20NB, 20NC) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
E595 (Type 20NF) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
L490 (type 20Q5, 20Q6) Laptops (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
L590 (type 20Q7, 20Q8) Laptops (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
P14s Gen 1 (type 20S4, 20S5) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
P14s Gen 1 (type 20Y1, 20Y2) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
P15s Gen 1 (type 20T4 20T5) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
P43s (Type 20RH, 20RJ) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
P53 (Type 20QN, 20QQ) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
P53s (Type 20N6, 20N7) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T14 Gen 1 (type 20UD, 20UE) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T14 Gen 1 (type 20S0, 20S1) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T14 Gen 1 (type 20S2, 20S3) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T14s (Type 20T0, 20T1) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T14s (Type 20UH, 20UJ) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T15 (type 20S6, 20S7) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T490 (Type 20N2, 20N3) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T490 (Type 20RY, 20RX) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T490 Type 20Q9, 20QH Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T490s (Type 20NX, 20NY) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T495 (Type 20NJ, 20NK) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T495s (Type 20QJ, 20QK) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
T590 (Type 20N4, 20N5) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
ThinkPad S3 2nd Gen type 20RG China only Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
X13 (Type 20T2, 20T3) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
X13 (Type 20UF, 20UG) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
X390 (Type 20Q0, 20Q1) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
X390 (Type 20SC, 20SD) Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w
X395 Laptop (ThinkPad) Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad n2icu02w

Alias Id:LEN-65532
Document ID:PS500447
Original Publish Date:11/09/2021
Last Modified Date:11/09/2021