CVE-2017-9758

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."

Score

CVSS 3.0 7.4 High

Status

Modified - cve@mitre.org

Published

2017-11-10

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Savitech Driver (Savitech-ic)

References

• http://www.securityfocus.com/bid/101700
• https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subver…
• https://www.kb.cert.org/vuls/id/446847
• https://zeroday.hitcon.org/vulnerability/ZD-2017-00386