Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2022-34326

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Realtek RTL8195AM是中国瑞昱半导体(Realtek)公司的一款物联网微控制器。 Realtek RTL8195AM 284241d70308ff2519e40afd7b284ba892c730a3之前的版本存在安全漏洞,该漏洞源于当Soft AP模式频繁且持续的出现Wi-Fi连接失败时,可以锁定timer任务。

AI Predicted 6.6 Difficulty: Moderate EPSS 0.77% · P54

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-34326

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In ambiot amb1_sdk (aka SDK for Ameba1) before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection (with four-way handshake) failures in Soft AP mode.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Realtek RTL8195AM 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Realtek RTL8195AM是中国瑞昱半导体(Realtek)公司的一款物联网微控制器。 Realtek RTL8195AM 284241d70308ff2519e40afd7b284ba892c730a3之前的版本存在安全漏洞,该漏洞源于当Soft AP模式频繁且持续的出现Wi-Fi连接失败时,可以锁定timer任务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2022-34326

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-34326

请登录查看更多情报信息。

Other References for CVE-2022-34326 (2)

Same Patch Batch · n/a · 2022-09-27 · 22 CVEs total

CVE-2022-3323 Advantech iView SQL注入漏洞
CVE-2022-3303 Linux kernel 安全漏洞
CVE-2022-41570 EyesOfNetwork SQL注入漏洞
CVE-2022-41571 EyesOfNetwork 安全漏洞
CVE-2022-41604 Check Point ZoneAlarm 安全漏洞
CVE-2022-37193 Chipolo ONE 安全漏洞
CVE-2022-31367 Strapi SQL注入漏洞
CVE-2022-37209 JFinal SQL注入漏洞
CVE-2022-40352 Online Tours & Travels Management System SQL注入漏洞
CVE-2022-40353 Online Tours & Travels Management System SQL注入漏洞
CVE-2022-40354 Online Tours & Travels Management System SQL注入漏洞
CVE-2022-40497 Wazuh 安全漏洞
CVE-2022-40817 Zammad 安全漏洞
CVE-2022-40816 Zammad 安全漏洞
CVE-2022-40878 Simple Exam Reviewer Management System 代码问题漏洞
CVE-2022-40877 Simple Exam Reviewer Management System SQL注入漏洞
CVE-2022-38335 Vtiger CRM 跨站脚本漏洞
CVE-2022-37028 ISAMS 跨站脚本漏洞
CVE-2022-38932 ToaruOS 缓冲区错误漏洞
CVE-2022-39835 Gajim 安全漏洞

Showing top 20 of 22 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2022-34326

No comments yet


Leave a comment