ID:7675 - Exploit for Stack-based buffer overflow in RTL8170C and RTL8195AM - CVE-2020-27301

 
Main Vulnerability Database Exploits ID:7675 - Exploit for Stack-based buffer overflow in RTL8170C and RTL8195AM - CVE-2020-27301

ID:7675 - Exploit for Stack-based buffer overflow in RTL8170C and RTL8195AM - CVE-2020-27301

Published: April 21, 2022


Vulnerability identifier: #VU53824
Vulnerability risk: Medium
CVE-ID: CVE-2020-27301
CWE-ID: CWE-121
Exploitation vector: Adjecent network
Vulnerable software:
RTL8170C
RTL8195AM

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when parsing WPA2 key. A remote attacker with knowledge of network PSK can send specially crafted packets to devices connected to the WiFi network, trigger stack-based buffer overflow and execute arbitrary code on WiFi client devices.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Install updates from vendor's website.