Critical Bugs Found in Popular Realtek Wi-Fi Module for Embedded Devices

 By The Hacker News - 2021-02-04

Description

Critical Full Takeover Bugs Found in Popular Realtek Wi-Fi Module for Embedded Devices

Summary

  • Major vulnerabilities have been discovered in the Realtek RTL8195A Wi-Fi module that could have been exploited to gain root access and take complete control of a device's wireless communications.
  • Although the issues uncovered by Vdoo were verified only on RTL8195A, the researchers said they extend to other modules as well, including RTL8711AM, RTL8711AF, and RTL8710AF.
  • Chief among them is a buffer overflow vulnerability (CVE-2020-9395) that permits an attacker in the proximity of an RTL8195 module to completely take over the module, without having to know the Wi-Fi network password (or pre-shared key) and regardless of whether the module is acting as a Wi-Fi access point (AP) or client.

 

Topics

  1. Security (0.27)
  2. Machine_Learning (0.14)
  3. Backend (0.1)

Similar Articles

Linux malware backdoors supercomputers

By Help Net Security - 2021-02-02

ESET researchers discovered Kobalos, a malware that has been attacking supercomputers – high performance computer (HPC) clusters.