PT-2021-5732 · Mediatek · Mediatek Microchips

Published 2021-12-25 · Updated 2022-01-06 · CVE-2021-37583

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MediaTek microchips versions 2.0.2 MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915

Description The issue is related to a buffer overflow in memory, allowing a remote attacker to elevate their privileges. It is caused by the mishandling of IEEE 1905 protocols in MediaTek microchips.

Recommendations For version 2.0.2, update to a newer version to mitigate the risk. For MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, consider disabling the handling of IEEE 1905 protocols until a patch is available. Restrict access to the vulnerable microchips to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-00175

CVE-2021-37583

Affected Products

Mediatek Microchips

References · 8

• https://bdu.fstec.ru/vul/2022-00175 · Security Note
• https://corp.mediatek.com/product-security-bulletin/January-2022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37583 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37583 · Vendor Advisory
• https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 · Note
• https://t.me/cvenotify/24907 · Telegram Post
• https://t.me/cvenotify/24987 · Telegram Post
• https://t.me/cibsecurity/34614 · Telegram Post