CVE-2017-9758

HIGH 7.4CVE-2017-9758 · Published 10/11/2017 · updated 17/06/2026

In short

CVE-2017-9758 is a HIGH (CVSS 7.4) vulnerability affecting savitech driver (savitech-ic).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.7% of all vulnerabilities.
Fix: update to 2.8.0.3 or later.

Package	Affected versions	Patched versions
savitech driver savitech-ic	`< 2.8.0.3`	`2.8.0.3`

Description

Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversion."

References

securityfocus.com/bid/101700 · Third Party Advisory
community.rsa.com/community/products/netwitness/blog/2017/10/27/inaudible-subversion-did-your-hi-fi-just-subvert-your-pc · Exploit
kb.cert.org/vuls/id/446847 · Third Party Advisory
zeroday.hitcon.org/vulnerability/ZD-2017-00386 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free