Lucene search

MediaTekCVE-2024-20072

HistoryJun 03, 2024 - 2:15 a.m.

CVE-2024-20072

2024-06-0302:15:09

CWE-787

MediaTek

web.nvd.nist.gov

cve-2024-20072

nvd

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

9.0%

JSON

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00364732; Issue ID: MSV-1332.

Affected configurations

Vulners

Node

mediateknbiot_sdkRange<5.0.5.0

mediatekmt6890_firmware

mediatekmt6990_firmware

mediatekmt7622_firmware

VendorProductVersionCPE
mediateknbiot_sdk*cpe:2.3:a:mediatek:nbiot_sdk:*:*:*:*:*:*:*:*
mediatekmt6890_firmware*cpe:2.3:a:mediatek:mt6890_firmware:*:*:*:*:*:*:*:*
mediatekmt6990_firmware*cpe:2.3:a:mediatek:mt6990_firmware:*:*:*:*:*:*:*:*
mediatekmt7622_firmware*cpe:2.3:o:mediatek:mt7622_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mediatek	nbiot_sdk	*	cpe:2.3:a:mediatek:nbiot_sdk::::::::
mediatek	mt6890_firmware	*	cpe:2.3:a:mediatek:mt6890_firmware::::::::
mediatek	mt6990_firmware	*	cpe:2.3:a:mediatek:mt6990_firmware::::::::
mediatek	mt7622_firmware	*	cpe:2.3:o:mediatek:mt7622_firmware::::::::

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT6890, MT6990, MT7622",
    "versions": [
      {
        "version": "SDK version 5.0.5.0 and before / OpenWRT 19.07, 21.02, 23.05",
        "status": "affected"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/June-2024

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-20072