PT-2025-2282 · Wlan Sta · Wlan Sta

Published 2025-01-06 · Updated 2025-01-11 · CVE-2024-20153

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WLAN STA (affected versions not specified)

Description In WLAN STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-304

Related Identifiers

CVE-2024-20153

Affected Products

Wlan Sta

References · 9

• https://osv.dev/vulnerability/CVE-2024-20153 · Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/January-2025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20153 · Security Note
• https://twitter.com/VulmonFeeds/status/1876132265576517632 · Twitter Post
• https://t.me/cvenotify/106373 · Telegram Post
• https://twitter.com/cracbot/status/1877596300943962151 · Twitter Post
• https://twitter.com/cracbot/status/1877958685760376962 · Twitter Post
• https://t.me/cvedetector/14327 · Telegram Post
• https://twitter.com/CVEnew/status/1876111029756694843 · Twitter Post