Описание
An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.6 (исключая)
Одновременно
cpe:2.3:o:realtek:rtl8711af_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8711af:-:*:*:*:*:*:*:*
Конфигурация 2Версия до 2.0.6 (исключая)
Одновременно
cpe:2.3:o:realtek:rtl8711am_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8711am:-:*:*:*:*:*:*:*
Конфигурация 3Версия до 2.0.6 (исключая)
Одновременно
cpe:2.3:o:realtek:rtl8195am_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8195am:-:*:*:*:*:*:*:*
Конфигурация 4Версия до 2.0.6 (исключая)
Одновременно
cpe:2.3:o:realtek:rtl8710af_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:realtek:rtl8710af:-:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00442
Низкий
8 High
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer.
EPSS
Процентиль: 63%
0.00442
Низкий
8 High
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-787