Wi-Fi Connection Vulnerability in Realtek RTL8195AM Devices
CVE-2022-34326

7.5HIGH

Key Information:

Vendor

Realtek

Status
Rtl8195am Firmware
Vendor
CVE Published:
27 September 2022

What is CVE-2022-34326?

The vulnerability arises from a flaw in the Ameba1 SDK used on Realtek RTL8195AM devices. When the devices experience numerous failures during the Wi-Fi four-way handshake in Soft AP mode, the timer and RX tasks can become locked. This can lead to performance degradation or a complete halt of functionality in devices relying on continuous Wi-Fi connections, exposing them to potential security risks. Users of affected devices should ensure that they have updates applied to avoid these issues.

References

https://www.realtek.com/en
https://www.amebaiot.com/en/security_bulletin/cve-2022-34...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.