CVE-2019-18990: Medium severity realtek rtl8812au vulnerability
A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-18990?
CVE-2019-18990 is a partial authentication bypass vulnerability that exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices.
How does CVE-2019-18990 work?
CVE-2019-18990 allows an attacker to send an unencrypted data frame to a WPA2-protected WLAN router, bypassing partial authentication and potentially gaining unauthorized access.
What is the severity of CVE-2019-18990?
CVE-2019-18990 has a severity rating of medium, with a CVSS score of 5.4.
Which devices are affected by CVE-2019-18990?
Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices are affected by CVE-2019-18990.
How can I fix CVE-2019-18990?
To mitigate CVE-2019-18990, apply the latest firmware updates provided by Realtek for the affected devices.