[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVQ_bRnGB3lk6E-TKlCy7wY5FwMFqk_xC7tyLRwJCrWM":3,"g5a-risk:CVE-2020-25857":120},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":52,"references":53,"referencesCount":60,"weaknesses":61,"weaknessesCount":52,"isActivelyExploited":75,"cisaInfo":26,"otxData":26,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":116,"notableEvents":117},"CVE-2020-25857","What is CVE-2020-25857?","The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker does not need to know the network's PSK.","The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate...","2021-02-03T17:15:15.747","2021-02-08T19:19:26.51",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.01229,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"realtek","rtl8195a_firmware","*","cpe:2.3:o:realtek:rtl8195a_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"rtl8195a","-","cpe:2.3:h:realtek:rtl8195a:-:*:*:*:*:*:*:*",2,[54],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fwww.vdoo.com\u002Fblog\u002Frealtek-rtl8195a-vulnerabilities-discovered\u002F","Vdoo",[58,59],"Exploit","Third Party Advisory",1,[62,70],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":71,"name":72,"description":73,"extendedDescription":66,"status":67,"abstraction":74,"structure":69},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","Variant",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2020-25857? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-25857, a high severity cyber security vulnerability from 2021. The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A ...","CVE-2020-25857, CVE-2020-25857 vulnerability, CVE-2020-25857 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, realtek security, rtl8195a_firmware vulnerability, rtl8195a vulnerability","\u002Fwhat-is\u002Fcve-2020-25857",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-25857","Cybersecurity","CVE-2020-25857, CVE-2020-25857 vulnerability, CVE-2020-25857 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":104,"Negate":26,"Nodes":105},"AND",[106,112],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":111,"VersionEndIncluding":26},"24D4DC02-E833-483C-885F-9E168E5F8A4C","2.08",{"Operator":107,"Negate":26,"CPEMatch":113},[114],{"Vulnerable":26,"Criteria":51,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"62A37D39-5134-4AFE-9F59-C8C36A113B04",[],[],{"lastModified":11,"cacheTime":119,"version":32},1792270004181,{"score":121,"band":122,"action":123,"scoredAt":124},51,"Medium","Plan remediation","2026-10-16T06:50:24.013491+00:00"]