Rtl8195a Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RF

Product

Rtl8195a Firmware

by Realtek · last CVE Jun 4, 2021

7

CVEs

0

On KEV

8.1

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 7Medium 0Low 0

Severity

All severities7 Critical0 High7 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Rtl8195a Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-25856	8.1	2%	Feb 3	The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an… Affected: before 2.08
CVE-2020-25855	8.1	3%	Feb 3	The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for a… Affected: before 2.08
CVE-2020-25854	8.1	3%	Feb 3	The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an… Affected: before 2.08
CVE-2020-27302	8.0	2%	Jun 4	A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a… Affected: All versions, or not specified
CVE-2020-27301	8.0	2%	Jun 4	A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an attacker in Wi-Fi range sends a… Affected: All versions, or not specified
CVE-2020-25857	7.5	1%	Feb 3	The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter… Affected: before 2.08
CVE-2020-25853	7.5	1%	Feb 3	The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an… Affected: before 2.08