Vulnetix
Try Vulnetix Request Demo
CVE-2020-9395 PUBLISHED CVSS 8 HIGH

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer.

EPSS 0.44% · 63.1th percentile

Risk Scores

CVSS v3.1
8
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.44%
63.1th percentile

Affected Products

VendorProductVersions
n/an/an/a
realtekrtl8710af_firmware0
realtekrtl8711af_firmware0
realtekrtl8195am_firmware0
realtekrtl8711am_firmware0

Timeline

References

Open in Interactive Console →