CVE-2020-27302

2021-06-0412:24:41

VDOO

www.cve.org

realtek rtl8710

stack buffer overflow

remote code execution

wi-fi range

wpa2 4-way-handshake

AI Score

8.3

Confidence

High

EPSS

0.001

Percentile

34.6%

JSON

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the “memcpy” function, when an attacker in Wi-Fi range sends a crafted “Encrypted GTK” value as part of the WPA2 4-way-handshake.

References

www.vdoo.com/blog/realtek-wifi-vulnerabilities-zero-day