CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
Percentile
25.0%
A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.
Vendor | Product | Version | CPE |
---|---|---|---|
realtek | rtl8812ar_firmware | 1.21ww | cpe:2.3:o:realtek:rtl8812ar_firmware:1.21ww:*:*:*:*:*:*:* |
realtek | rtl8812ar | - | cpe:2.3:h:realtek:rtl8812ar:-:*:*:*:*:*:*:* |
realtek | rtl8196d | - | cpe:2.3:h:realtek:rtl8196d:-:*:*:*:*:*:*:* |
realtek | rtl8196d_firmware | 1.0.0 | cpe:2.3:o:realtek:rtl8196d_firmware:1.0.0:*:*:*:*:*:*:* |
realtek | rtl8192er | - | cpe:2.3:h:realtek:rtl8192er:-:*:*:*:*:*:*:* |
realtek | rtl8192er_firmware | 2.10 | cpe:2.3:o:realtek:rtl8192er_firmware:2.10:*:*:*:*:*:*:* |
realtek | rtl8881an | - | cpe:2.3:h:realtek:rtl8881an:-:*:*:*:*:*:*:* |
realtek | rtl8881an_firmware | 1.09 | cpe:2.3:o:realtek:rtl8881an_firmware:1.09:*:*:*:*:*:*:* |
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
Percentile
25.0%