[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3CRvpw6bExRBdAQaWi_BShyg6AcbPatYYL31ZxDMgMs":3,"g5a-ex:realtek\u002Frtl8195a_firmware@*":77,"g5a-family:realtek\u002Frtl8195a_firmware":79},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":54,"seoMetadata":55,"meta":74},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"realtek","rtl8195a_firmware",1,7,0,"2021-06-04",[14],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.08",false,"Rtl8195a Firmware by Realtek is a technology product with 1 tracked version and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},[21,29,32,36,41,45,50],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2020-25855","The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for a memcpy() operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker needs to know the network's PSK in order to exploit this.","2021-02-03",8.1,"v3.1","High",0.02636,{"cveId":30,"description":31,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2020-25854","The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, rt_arc4_crypt_veneer() or _AES_UnWRAP_veneer(), resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker needs to know the network's PSK in order to exploit this.",{"cveId":33,"description":34,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":35},"CVE-2020-25856","The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker needs to know the network's PSK in order to exploit this.",0.02159,{"cveId":37,"description":38,"publishedDate":12,"cvssScore":39,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":40},"CVE-2020-27302","A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the \"memcpy\" function, when an attacker in Wi-Fi range sends a crafted \"Encrypted GTK\" value as part of the WPA2 4-way-handshake.",8,0.02009,{"cveId":42,"description":43,"publishedDate":12,"cvssScore":39,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":44},"CVE-2020-27301","A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the \"AES_UnWRAP\" function, when an attacker in Wi-Fi range sends a crafted \"Encrypted GTK\" value as part of the WPA2 4-way-handshake.",0.01991,{"cveId":46,"description":47,"publishedDate":24,"cvssScore":48,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":49},"CVE-2020-25853","The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, _rt_md5_hmac_veneer() or _rt_hmac_sha1_veneer(), resulting in a stack buffer over-read which can be exploited for denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker does not need to know the network's PSK.",7.5,0.01247,{"cveId":51,"description":52,"publishedDate":24,"cvssScore":48,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":53},"CVE-2020-25857","The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker does not need to know the network's PSK.",0.01229,[],{"title":56,"metaDescription":57,"keywords":58,"structuredData":59},"Rtl8195a Firmware by Realtek - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Rtl8195a Firmware by Realtek covering 1 version with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rtl8195a Firmware vulnerabilities, Rtl8195a Firmware security, Rtl8195a Firmware CVE, Realtek Rtl8195a Firmware, Rtl8195a Firmware threat intelligence, Realtek security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":60,"@type":61,"name":62,"description":57,"url":63,"manufacturer":64,"applicationCategory":68,"softwareVersion":69,"mainEntity":70},"https:\u002F\u002Fschema.org","SoftwareApplication","Rtl8195a Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Frealtek\u002Frtl8195a_firmware",{"@type":65,"name":66,"url":67},"Organization","Realtek","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Frealtek","Security Software","1 versions tracked",{"@type":71,"name":72,"description":73,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rtl8195a Firmware Security Vulnerabilities","Security vulnerabilities affecting Rtl8195a Firmware by Realtek",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":75,"apiVersion":76},"2026-10-17T20:40:31.179Z","3.0",{"rows":78,"total":11,"capped":16,"failed":11},[],[]]