CVE-2020-9395: Buffer Overflow
Published Jul 6, 2020
·Updated
An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer.
Affected Software
8 affected components
Realtek Rtl8711af Firmware<2.0.6
Realtek RTL8711AF
Realtek Rtl8711am Firmware<2.0.6
Realtek RTL8711AM
Realtek Rtl8195am Firmware<2.0.6
Realtek RTL8195AM
Realtek Rtl8710af Firmware<2.0.6
Realtek RTL8710AF
Remediation
Event History
Jul 6, 2020
CVE Published
via MITRE·09:09 PM
Data Sourced
via MITRE·09:09 PM
Description
Frequently Asked Questions
1
What is CVE-2020-9395?
CVE-2020-9395 is a vulnerability discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before version 2.0.6.
2
What is the severity of CVE-2020-9395?
CVE-2020-9395 has a severity level of high.
3
How does CVE-2020-9395 affect Realtek devices?
CVE-2020-9395 affects Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before version 2.0.6.
4
Is my Realtek device vulnerable to CVE-2020-9395?
Realtek devices running firmware versions up to 2.0.6 are vulnerable to CVE-2020-9395.
5
How can I fix CVE-2020-9395 vulnerability on my Realtek device?
To fix CVE-2020-9395, you need to update your Realtek device firmware to version 2.0.6 or higher.