PT-2021-5732

CVE-2021-37583

·

Published

2021-12-25

·

Updated

2022-01-06

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions MediaTek microchips versions 2.0.2 MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915
Description The issue is related to a buffer overflow in memory, allowing a remote attacker to elevate their privileges. It is caused by the mishandling of IEEE 1905 protocols in MediaTek microchips.
Recommendations For version 2.0.2, update to a newer version to mitigate the risk. For MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, consider disabling the handling of IEEE 1905 protocols until a patch is available. Restrict access to the vulnerable microchips to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾