PT-2020-10031
CVE-2019-18989
·
Published
2020-09-30
·
Updated
2021-07-21
Description by
CVSS 3.1
6.1
MediumMetricsAC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N
Name of the Vulnerable Software and Affected Versions
Mediatek MT7620N version 1.06
Description
A partial authentication bypass issue exists, allowing an attacker to send an unencrypted data frame to a WPA2-protected WLAN router. The packet is then routed through the network, and if successful, a response is sent back as an encrypted frame. This could enable an attacker to discern information or potentially modify data.
Recommendations
For Mediatek MT7620N version 1.06, at the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾