vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-21742

Realtek USB FE/1GbE/2.5GbE/5GbE NIC Family - Buffer Overflow

MEDIUM
6.5
CVSS Score
Published: June 20, 2022 at 05:30 AM UTC
Updated: June 17, 2026 at 04:26 AM UTC
15 products affected across 1 vendorRTL8154 FirmwareRTL8153 FirmwareRTL8156 Firmware

Using USB FE/1GbE/2.5GbE/5GbE NIC Family by Realtek?

Get instant alerts when new vulnerabilities affect USB FE/1GbE/2.5GbE/5GbE NIC Family - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.5
Exploit prediction
EPSS 0.2%

Description

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

RTL8152B Firmware· Realtek
95%
10.28 ≤ v < 10.507.42 ≤ v ≤ 7.538.49 ≤ v ≤ 8.60
Affected range stops below 10.50, so it looks safe — our inference, not a vendor statement
realtek-rtl8152b (same device)
RTL8153 Firmware· Realtek
95%
10.28 ≤ v < 10.507.42 ≤ v ≤ 7.538.49 ≤ v ≤ 8.60
Affected range stops below 10.50, so it looks safe — our inference, not a vendor statement
realtek-rtl8153 (same device)
RTL8153B Firmware· Realtek
95%
10.28 ≤ v < 10.507.42 ≤ v ≤ 7.538.49 ≤ v ≤ 8.60
Affected range stops below 10.50, so it looks safe — our inference, not a vendor statement
realtek-rtl8153b (same device)
RTL8154 Firmware· Realtek
95%
10.28 ≤ v < 10.507.42 ≤ v ≤ 7.538.49 ≤ v ≤ 8.60
Affected range stops below 10.50, so it looks safe — our inference, not a vendor statement
realtek-rtl8154 (same device)
RTL8154B Firmware· Realtek
95%
10.28 ≤ v < 10.507.42 ≤ v ≤ 7.538.49 ≤ v ≤ 8.60
Affected range stops below 10.50, so it looks safe — our inference, not a vendor statement
realtek-rtl8154b (same device)
RTL8156 Firmware· Realtek
95%
10.28 ≤ v < 10.507.42 ≤ v ≤ 7.538.49 ≤ v ≤ 8.60
Affected range stops below 10.50, so it looks safe — our inference, not a vendor statement
realtek-rtl8156 (same device)
RTL8156B Firmware· Realtek
95%
10.28 ≤ v < 10.507.42 ≤ v ≤ 7.538.49 ≤ v ≤ 8.60
Affected range stops below 10.50, so it looks safe — our inference, not a vendor statement
realtek-rtl8156b (same device)
USB Nic Family· Realtek
60%
10.28 ≤ v ≤ 10.397.42 ≤ v ≤ 7.538.49 ≤ v ≤ 8.6010.287.428.49
Rtl8152B· Realtekdevice
80%
All versions
Rtl8153· Realtekdevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

x_refsource_MISCThird Party Advisory
Source: [email protected]
https://www.twcert.org.tw/tw/cp-132-6057-1cd0d-1.html

CVSS

6.5MEDIUM[email protected]
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-120

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card