CVE-2020-27301

2021-06-0412:24:37

VDOO

www.cve.org

realtek

buffer overflow

remote code execution

wi-fi

aes_unwrap

wpa2

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

34.6%

JSON

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the “AES_UnWRAP” function, when an attacker in Wi-Fi range sends a crafted “Encrypted GTK” value as part of the WPA2 4-way-handshake.

References

www.vdoo.com/blog/realtek-wifi-vulnerabilities-zero-day