Savitech provides USB audio drivers for a number of specialized audio products. Some versions of the Savitech driver package silently install a root CA certificate into the Windows trusted root certificate store.
Savitech provides USB audio drivers for a number of specialized audio products. Some versions of the Savitech driver package silently install a SaviAudio root CA certificate into the Windows trusted root certificate store. According to Savitech, this certificate is used for driver signing under Windows XP and is no longer necessary, but was not removed from installers for later operating systems. This issue has been assigned CVE-2017-9758.
There is currently no evidence that the Savitech private key is compromised. However, users are encouraged to remove the certificate out of caution. The two known certificates are:
An attacker with access to the Savitech private key material may be able to impersonate web sites and other services, sign and install malicious software, and decrypt network traffic and other data (man in the middle) on affected systems.
Remove Savitech certificate
Dell Not Affected
Dell EMC Not Affected
Accuphase Laboratory, Inc. Unknown
AsusTek Computer Inc. Unknown
Creek Audio Ltd Unknown
Intos Electronic Unknown
JDS Labs Unknown
McIntosh Laboratory, Inc. Unknown
ShenZhen YuLong Audio Unknown
Stoner Acoustics Unknown
TeraDak Audio Electric Company Unknown
Thanks to Kent Backman from RSA for reporting this vulnerability.
This document was written by Garret Wassermann.
|Date First Published:||2017-11-02|
|Date Last Updated:||2017-11-06 16:00 UTC|