What’s Vulnerable › Vulnerabilities

CVE-2020-27301

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-06-04 · updated 2026-06-17
• Weakness: CWE-787

Description

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake.

Affected products

• Realtek RTL8195A Wi-Fi Module: all versions
• Realtek Rtl8710C Firmware: all versions

References

• https://www.vdoo.com/blog/realtek-wifi-vulnerabilities-zero-day
• https://www.vdoo.com/blog/realtek-wifi-vulnerabilities-zero-day

Get alerted when CVE-2020-27301 or the next vulnerability affects your stack