Vulnerability Details CVE-2017-9758
Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.0%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 5.8
References
- http://www.securityfocus.com/bid/101700
- https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc
- https://www.kb.cert.org/vuls/id/446847
- https://zeroday.hitcon.org/vulnerability/ZD-2017-00386
- http://www.securityfocus.com/bid/101700
- https://community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc
- https://www.kb.cert.org/vuls/id/446847
- https://zeroday.hitcon.org/vulnerability/ZD-2017-00386
Products affected by CVE-2017-9758
-
cpe:2.3:a:savitech-ic:savitech_driver:*