WPS Protocol Vulnerability in MediaTek Chipsets Used by NETGEAR Devices

CVE-2021-32467

Summary

MediaTek chipsets, deployed in a range of NETGEAR devices, contain vulnerabilities related to the Wifi Protected Setup (WPS) protocol. This flaw allows for mishandling of input, specifically leading to potential out-of-bounds reads that could be exploited by an attacker. Device models utilizing affected chipsets like MT7603E, MT7610, MT7612, and others are particularly susceptible. Users are recommended to apply security updates to mitigate these vulnerabilities as outlined in advisories from NETGEAR and MediaTek.

References