CVE-2021-41788 Information

Description

MediaTek microchips as used in NETGEAR devices through 2021-12-13 and other devices mishandle attempts at Wi-Fi authentication flooding. (Affected Chipsets MT7603E MT7612 MT7613 MT7615 MT7622 MT7628 MT7629 MT7915; Affected Software Versions 7.4.0.0).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

https://kb.netgear.com/000064369/Security-Advisory-for-WiFi-Authentication-Flooding-Vulnerabilities-on-Multiple-Products-PSV-2021-0299-PSV-2021-0301 https://corp.mediatek.com/product-security-bulletin/January-2022

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

7.5