Realtek RTL8710C Firmware vulnerabilities

2 CVEs affecting Realtek RTL8710C Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-27302, published 2021-06-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27302, published 2021-06-04. High severity, CVSS 8.0. EPSS: 2% chance of exploitation in the next 30 days. A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK"…
CVE-2020-27301, published 2021-06-04. High severity, CVSS 8.0. EPSS: 2% chance of exploitation in the next 30 days. A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted…