Is CVE-2020-9395 actively exploited?

CVE-2020-9395 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2020-9395?

CVE-2020-9395 has a CVSS score of 8 (HIGH severity). Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.

How do I patch CVE-2020-9395?

Patch guidance is available from realtek security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2020-9395.

Fix CVE-2020-9395 - HIGH realtek rtl8711af firmware

Q: Which products are affected by CVE-2020-9395?

4 products: realtek rtl8711af firmware, realtek rtl8711am firmware, realtek rtl8195am firmware, realtek rtl8710af firmware.

Description

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer.

CVSS Metrics

Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector: adjacent network
Complexity: high
Privileges: low
User Action: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-787 · Out-of-bounds Write

Metadata

Primary Vendor: REALTEK
Published: 7/6/2020
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

realtek : rtl8711af_firmwarerealtek : rtl8711am_firmwarerealtek : rtl8195am_firmwarerealtek : rtl8710af_firmware

Remediation Guidance

Executive Summary

View on NIST NVD