CVE-2017-9758 Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."
HighCVSS 7.4
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| savitech-ic savitech driver | < 2.8.0.3 | 2.8.0.3 |
References
- 101700 third-party-advisory vdb-entry
- community.rsa.com exploit technical-description third-party-advisory
- VU#446847 third-party-advisory us-government-resource
- zeroday.hitcon.org third-party-advisory