CVE-2021-32467 Information

Description

MediaTek microchips as used in NETGEAR devices through 2021-11-11 and other devices mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E MT7610 MT7612 MT7613 MT7615 MT7620 MT7622 MT7628 MT7629 MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 https://corp.mediatek.com/product-security-bulletin/January-2022

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

7.5