CVE-2021-37565 Information

Description

MediaTek microchips as used in NETGEAR devices through 2021-11-11 and other devices mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E MT7613 MT7615 MT7622 MT7628 MT7629 MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 https://corp.mediatek.com/product-security-bulletin/January-2022

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

7.5