Realtek Rtl8195a Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Realtek Rtl8195a Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2020-25856 — CVSS 8.1 (high): The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does…
• CVE-2020-25854 — CVSS 8.1 (high): The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does…
• CVE-2020-25855 — CVSS 8.1 (high): The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not…
• CVE-2020-27301 — CVSS 8.0 (high): A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function…
• CVE-2020-27302 — CVSS 8.0 (high): A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function…
• CVE-2020-25853 — CVSS 7.5 (high): The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not…
• CVE-2020-25857 — CVSS 7.5 (high): The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08)…