Read the docs
TI-2024-11000 Aliases CVE-2024-11857GHSA-vh52-rw4g-55j6

Realtek Bluetooth HCI Adaptor - Privilege Escalation

Priority LOW 38CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary file deletion to privilege escalation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00208 11th percentileScored 2026-11-07
Fix Fixed Bluetooth HCI Adaptor (Realtek): 1.1.73.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
RealtekBluetooth HCI Adaptorbefore 1.1.73.11.1.73.1Patch availableCNA
  • Bluetooth HCI Adaptor VendorRealtek Affected before 1.1.73.1 Fixed in 1.1.73.1 Patch available CNA

Remediation

  • Fix · CNA Bluetooth HCI Adaptor (Realtek) Fixed in 1.1.73.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-11857
  2. 2026-10-03 Alias added: GHSA-vh52-rw4g-55j6

References

Advisory 2

  • TI-2021-14193 Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-14192 Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-06873 The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-14191 Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server… CVSS 3.1CRITICAL 9.8
  • TI-2023-25815 Cross-site request forgery in LevelOne WBR-6013 CVSS 3.1HIGH 8.8
  • TI-2021-14190 Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server… CVSS 3.1HIGH 7.5
See all 79 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences