CVE-2019-18990
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Realtek RTL8195AM等都是中国台湾瑞昱半导体（Realtek）公司的一款物联网微控制器。 Realtek 设备存在安全漏洞。该漏洞源于允许将未加密的数据帧发送到受WPA2保护的WLAN路由器，在该路由器中，数据包将通过网络进行路由。 如果成功，则将响应作为加密帧发送回，攻击者可以利用该漏洞识别信息或潜在地修改数据。以下产品及版本受到影响：RTL8812AR 1.21WW，RTL8196D 1.0.0，RTL8192ER 2.10和RTL8881AN 1.09。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-18990
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款 Realtek 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Realtek RTL8195AM等都是中国台湾瑞昱半导体（Realtek）公司的一款物联网微控制器。 Realtek 设备存在安全漏洞。该漏洞源于允许将未加密的数据帧发送到受WPA2保护的WLAN路由器，在该路由器中，数据包将通过网络进行路由。 如果成功，则将响应作为加密帧发送回，攻击者可以利用该漏洞识别信息或潜在地修改数据。以下产品及版本受到影响：RTL8812AR 1.21WW，RTL8196D 1.0.0，RTL8192ER 2.10和RTL8881AN 1.09。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2019-18990
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-18990
请登录查看更多情报信息。
Other References for CVE-2019-18990 (1)
Same Patch Batch · n/a · 2020-09-30 · 45 CVEs total
| CVE-2020-26160 | 7.5 HIGH | jwt-go 安全漏洞 |
| CVE-2020-14375 | Ubuntu DPDK 代码问题漏洞 | |
| CVE-2020-13951 | Apache OpenMeetings 安全漏洞 | |
| CVE-2020-25816 | HashiCorp Vault和Vault Enterprise 安全漏洞 | |
| CVE-2020-25830 | MantisBT 跨站脚本漏洞 | |
| CVE-2020-12870 | RainbowFish PacsOne Server SQL注入漏洞 | |
| CVE-2020-12715 | RainbowFish PacsOne Server 代码问题漏洞 | |
| CVE-2020-13952 | Apache Superset 安全漏洞 | |
| CVE-2020-12869 | RainbowFish PacsOne Server 跨站脚本漏洞 | |
| CVE-2020-25781 | MantisBT 安全漏洞 | |
| CVE-2020-14376 | Ubuntu DPDK 缓冲区错误漏洞 | |
| CVE-2020-14374 | Ubuntu DPDK copy_data安全漏洞 | |
| CVE-2020-15849 | desk2.3 SettingsController SQL注入漏洞 | |
| CVE-2020-15488 | desk 代码问题漏洞 | |
| CVE-2020-15487 | Desk SQL注入漏洞 | |
| CVE-2020-19676 | Nacos 信息泄露漏洞 | |
| CVE-2020-24721 | Google Apple GAEN 安全漏洞 | |
| CVE-2020-19672 | Niushop B2B2C 代码问题漏洞 | |
| CVE-2019-18991 | Qualcomm 芯片和D-Link DWR-116授权问题漏洞 | |
| CVE-2019-18989 | Mediatek MT7620N 授权问题漏洞 |
Showing top 20 of 45 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-18990
No comments yet