PT-2020-10031 · Mediatek · Mediatek Mt7620N

Published 2020-09-30 · Updated 2021-07-21 · CVE-2019-18989

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Mediatek MT7620N version 1.06

Description A partial authentication bypass issue exists, allowing an attacker to send an unencrypted data frame to a WPA2-protected WLAN router. The packet is then routed through the network, and if successful, a response is sent back as an encrypted frame. This could enable an attacker to discern information or potentially modify data.

Recommendations For Mediatek MT7620N version 1.06, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2019-18989

Affected Products

Mediatek Mt7620N

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-18989 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18989 · Vendor Advisory
• https://synopsys.com/blogs/software-security/cyrc-advisory-sept2020 · Note