CVE-2020-9395
High
Description
An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer.
SeverityHigh
CVSS8.0
Exploit probability—
ProductRealtek Rtl8711af Firmware
PublishedJul 6, 2020
First seenJul 6, 2020
How to fix
Update
- realtek rtl8711af_firmware2.0.6 or later
- realtek rtl8711am_firmware2.0.6 or later
- realtek rtl8195am_firmware2.0.6 or later
- realtek rtl8710af_firmware2.0.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| realtek rtl8711af_firmware | v < 2.0.6 | 2.0.6 |
| realtek rtl8711am_firmware | v < 2.0.6 | 2.0.6 |
| realtek rtl8195am_firmware | v < 2.0.6 | 2.0.6 |
| realtek rtl8710af_firmware | v < 2.0.6 | 2.0.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.