CVE-2019-18990 - CVE House
Back to Database
Status published Medium CVE-2019-18990

A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW,...

Vulnerability Description

A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18990

Credits & Attribution

No credits recorded in the NVD database.

References

More from realtek

View All →
CVE-2022-34326
In ambiot amb1_sdk (aka SDK for Ameba1) before 2022-06-20 on...
Unknown 0
CVE-2022-29558
Realtek rtl819x-SDK before v3.6.1 allows command injection over the web...
High 8.8
CVE-2022-27255
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP...
Critical 9.8
CVE-2022-25480
Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys)...
Unknown 0
CVE-2022-25479
Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys)...
Unknown 0

Affected Vendor

Affected Software

rtl8812ar firmware, rtl8196d firmware, rtl8192er firmware, rtl8881an firmware
Vulnerable Versions:
1.21ww, 1.0.0, 2.10, 1.09

Timeline

Official Publish: September 30th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.