Savitech provides USB audio drivers for a number of specialized audio products. Some versions of the Savitech driver package silently install a root CA certificate into the Windows trusted root certificate store.
Savitech provides USB audio drivers for a number of specialized audio products. Some versions of the Savitech driver package silently install a SaviAudio root CA certificate into the Windows trusted root certificate store. According to Savitech, this certificate is used for driver signing under Windows XP and is no longer necessary, but was not removed from installers for later operating systems. This issue has been assigned CVE-2017-9758.
There is currently no evidence that the Savitech private key is compromised. However, users are encouraged to remove the certificate out of caution. The two known certificates are:
An attacker with access to the Savitech private key material may be able to impersonate web sites and other services, sign and install malicious software, and decrypt network traffic and other data (man in the middle) on affected systems.
Remove Savitech certificate
Accuphase Laboratory, Inc.
AsusTek Computer Inc.
Creek Audio Ltd
FiiO Electronics Technology Co., Ltd.
McIntosh Laboratory, Inc.
ShenZhen YuLong Audio
TeraDak Audio Electric Company
Thanks to Kent Backman from RSA for reporting this vulnerability.
This document was written by Garret Wassermann.
|Date First Published:||2017-11-02|
|Date Last Updated:||2017-11-06 16:00 UTC|