60
CVE-2020-27301
PoC —CVSS 3.1
8.0 high
EPSS
2%p80
Published
()
Modified
Description
A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake.
- Vendors
- realtek
- Products
- rtl8710c firmware, rtl8195a firmware
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H