Lucene search

MitreCVELIST:CVE-2021-37569

HistoryDec 25, 2021 - 11:24 p.m.

CVE-2021-37569

2021-12-2523:24:23

mitre

www.cve.org

mediatek microchips

netgear devices

ieee 1905 protocols

out-of-bounds write

mt7603e

mt7613

mt7615

mt7622

mt7628

mt7629

mt7915

software versions 2.0.2

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

AI Score

Confidence

High

EPSS

0.002

Percentile

60.4%

JSON

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).

References

corp.mediatek.com/product-security-bulletin/January-2022

kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

AI Score

Confidence

High

EPSS

0.002

Percentile

60.4%

JSON

Related for CVELIST:CVE-2021-37569