CVE-2021-37568 Information

Description

MediaTek microchips as used in NETGEAR devices through 2021-11-11 and other devices mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E MT7613 MT7615 MT7622 MT7628 MT7629 MT7915; Affected Software Versions 2.0.2; Out-of-bounds write).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Reference

https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 https://corp.mediatek.com/product-security-bulletin/January-2022

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8