Realtek Driver Privilege Escalation Vulnerability
Realtek Driver Privilege Escalation Vulnerability
Realtek Driver Privilege Escalation Vulnerability
Lenovo Security Advisory: LEN-65532
Potential Impact: Privilege escalation
Severity: High
Scope of Impact: Industry-wide
CVE Identifier: CVE-2021-36922, CVE-2021-36923, CVE-2021-36924, CVE-2021-36925
Summary Description:
Realtek reported a privilege escalation vulnerability in Realtek RtsUpx USB utility driver that could allow a local attacker to execute code with elevated privileges.
Mitigation Strategy for Customers (what you should do to protect yourself):
Realtek recommends updating to the driver version (or newer) indicated for your model in the Product Impact section below.
To download the version specified for your product below, follow these steps:
Navigate to the Drivers & Software support site for your product:
- Lenovo Products (sold worldwide, except in China): https://support.lenovo.com/
- Lenovo Products (sold in China): https://newsupport.lenovo.com.cn/
- IBM-branded System x Legacy Products: https://www.ibm.com/support/fixcentral/
- Search for your product by name or machine type.
- Click Drivers & Software on the left menu panel.
- Click on Manual Update to browse by Component type.
- Compare the minimum fix version for your product from the applicable product table below with the latest version posted on the support site.
Lenovo also offers tools to assist with update management as an alternative to the manual steps described above. Refer to the following for additional help:
PC Products and Software: https://support.lenovo.com/us/en/solutions/ht504759
Server and Enterprise Software: https://support.lenovo.com/us/en/solutions/lnvo-lxcaupd and https://datacentersupport.lenovo.com/us/en/documents/lnvo-center
Click below links to view affected products:
Acknowledgement:
Lenovo thanks Roy Ronen from SentinelOne for reporting this issue.
References:
https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf
Revision History:
Revision | Date | Description |
---|---|---|
1 | 2021-11-09 | Initial release |
For a complete list of all Lenovo Product Security Advisories, click here.
For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on an “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.
Product Impact:
Product | Component | Minimum Fixed Version |
E14 (Type 20RA, 20RB) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E15 (Type 20RD, 20RE) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E480 (Type 20KN, 20KQ) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E485 (Type 20KU) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E490 (Type 20N8, 20N9) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E490s (Type 20NG) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E495 (Type 20NE) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E580 (Type 20KS 20KT) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E585 (Type 20KV) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E590 (Type 20NB, 20NC) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
E595 (Type 20NF) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
L490 (type 20Q5, 20Q6) Laptops (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
L590 (type 20Q7, 20Q8) Laptops (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
P14s Gen 1 (type 20S4, 20S5) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
P14s Gen 1 (type 20Y1, 20Y2) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
P15s Gen 1 (type 20T4 20T5) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
P43s (Type 20RH, 20RJ) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
P53 (Type 20QN, 20QQ) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
P53s (Type 20N6, 20N7) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T14 Gen 1 (type 20UD, 20UE) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T14 Gen 1 (type 20S0, 20S1) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T14 Gen 1 (type 20S2, 20S3) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T14s (Type 20T0, 20T1) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T14s (Type 20UH, 20UJ) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T15 (type 20S6, 20S7) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T490 (Type 20N2, 20N3) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T490 (Type 20RY, 20RX) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T490 Type 20Q9, 20QH Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T490s (Type 20NX, 20NY) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T495 (Type 20NJ, 20NK) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T495s (Type 20QJ, 20QK) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
T590 (Type 20N4, 20N5) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
ThinkPad S3 2nd Gen type 20RG China only | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
X13 (Type 20T2, 20T3) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
X13 (Type 20UF, 20UG) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
X390 (Type 20Q0, 20Q1) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
X390 (Type 20SC, 20SD) Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
X395 Laptop (ThinkPad) | Integrated Camera Device Firmware 1M for Windows 10 (Version 1709 or later) - ThinkPad | n2icu02w |
Your feedback helps to improve the overall experience