Vulnerability Note VU#446847
Savitech USB audio drivers install a new root CA certificate
Savitech provides USB audio drivers for a number of specialized audio products. Some versions of the Savitech driver package silently install a root CA certificate into the Windows trusted root certificate store.
Savitech provides USB audio drivers for a number of specialized audio products. Some versions of the Savitech driver package silently install a SaviAudio root CA certificate into the Windows trusted root certificate store. According to Savitech, this certificate is used for driver signing under Windows XP and is no longer necessary, but was not removed from installers for later operating systems. This issue has been assigned CVE-2017-9758.
There is currently no evidence that the Savitech private key is compromised. However, users are encouraged to remove the certificate out of caution. The two known certificates are:
An attacker with access to the Savitech private key material may be able to impersonate web sites and other services, sign and install malicious software, and decrypt network traffic and other data (man in the middle) on affected systems.
Remove Savitech certificate
Vendor Information (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Savitech||Affected||-||28 Sep 2017|
|Dell||Not Affected||-||06 Nov 2017|
|Dell EMC||Not Affected||09 Aug 2017||03 Nov 2017|
|Accuphase Laboratory, Inc.||Unknown||29 Aug 2017||29 Aug 2017|
|AsusTek Computer Inc.||Unknown||29 Aug 2017||29 Aug 2017|
|Audio-Technica||Unknown||29 Aug 2017||29 Aug 2017|
|Creek Audio Ltd||Unknown||29 Aug 2017||29 Aug 2017|
|FiiO Electronics Technology Co., Ltd.||Unknown||29 Aug 2017||29 Aug 2017|
|HiFime||Unknown||29 Aug 2017||29 Aug 2017|
|Intos Electronic||Unknown||29 Aug 2017||29 Aug 2017|
|JDS Labs||Unknown||29 Aug 2017||29 Aug 2017|
|McIntosh Laboratory, Inc.||Unknown||29 Aug 2017||29 Aug 2017|
|ShenZhen YuLong Audio||Unknown||29 Aug 2017||29 Aug 2017|
|Stoner Acoustics||Unknown||29 Aug 2017||29 Aug 2017|
|Sybasonic||Unknown||29 Aug 2017||29 Aug 2017|
CVSS Metrics (Learn More)
Thanks to Kent Backman from RSA for reporting this vulnerability.
This document was written by Garret Wassermann.
- CVE IDs: CVE-2017-9758
- Date Public: 03 Oct 2017
- Date First Published: 02 Nov 2017
- Date Last Updated: 06 Nov 2017
- Document Revision: 46
If you have feedback, comments, or additional information about this vulnerability, please send us email.