Stack-based buffer overflow in RTL8170C and RTL8195AM - CVE-2020-27301

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when parsing WPA2 key. A remote attacker with knowledge of network PSK can send specially crafted packets to devices connected to the WiFi network, trigger stack-based buffer overflow and execute arbitrary code on WiFi client devices.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2020-27301

Links to Public Exploits and PoC-codes

• Exploit #7675 - CVE-2020-27301-hostapd () (April 21, 2022)

External References

• https://www.vdoo.com/blog/realtek-wifi-vulnerabilities-zero-day

Related Security Bulletins

• Remote code execution when parsing WPA2 key in Realtek WiFi chipsets