Lucene search

CVE-2020-9395

🗓️ 06 Jul 2020 22:11:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 75 Views🌐 WEB

An issue discovered on Realtek devices before 2.0.6, with stack-based buffer overflow

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2020-9395	6 Jul 202022:15	–	nvd
Prion	Stack overflow	6 Jul 202022:15	–	prion
CNVD	Buffer Overflow Vulnerability in Multiple Realtek Products	7 Jul 202000:00	–	cnvd
Cvelist	CVE-2020-9395	6 Jul 202021:09	–	cvelist
WPVulnDB	Pricing Table by Supsystic < 1.8.2 - Unauthenticated Stored XSS	25 Feb 202000:00	–	wpvulndb
wpexploit	Pricing Table by Supsystic < 1.8.2 - Unauthenticated Stored XSS	25 Feb 202000:00	–	wpexploit
The Hacker News	Critical Bugs Found in Popular Realtek Wi-Fi Module for Embedded Devices	4 Feb 202108:36	–	thn
The Hacker News	Researchers Warn of Critical Bugs Affecting Realtek Wi-Fi Module	3 Jun 202111:54	–	thn

Nvd

Node

realtek rtl8711af_firmwareRange<2.0.6

AND

realtek rtl8711afMatch-

Node

realtek rtl8711am_firmwareRange<2.0.6

AND

realtek rtl8711amMatch-

Node

realtek rtl8195am_firmwareRange<2.0.6

AND

realtek rtl8195amMatch-

Node

realtek rtl8710af_firmwareRange<2.0.6

AND

realtek rtl8710afMatch-

Source	Link
github	www.github.com/ambiot/amb1_sdk/commit/bc5173d5d4faf6829074b0f1e1b242c12b7777a3
github	www.github.com/ambiot/amb1_arduino/commit/dcea55cf9775a0166805b3db845b237ecd5e74ea
amebaiot	www.amebaiot.com/en/security_bulletin/

Parameter	Position	Path	Description	CWE
mod	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
action	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
data[0][id]	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
data[0][unique_id]	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
data[0][label]	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
data[0][original_id]	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
data[0][params][bg_color][val]	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
data[0][params][txt_item_html][val]	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
data[0][params][img_item_html][val]	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787
data[0][params][icon_item_html][val]	query param	/wp-admin/admin-ajax.php	No permission check allows unauthenticated users to inject malicious JavaScript.	CWE-787

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jul 2020 22:15Current

8.1High risk

Vulners AI Score8.1

CVSS24.9

CVSS38

EPSS0.00044

CWE-787