Out-of-bounds Read Vulnerability in NETGEAR Devices with MediaTek Chipsets

CVE-2021-37562

Summary

This vulnerability occurs when devices using MediaTek microchips mishandle the WPS (Wi-Fi Protected Setup) protocol, leading to potential out-of-bounds read issues. Targets include various NETGEAR devices reliant on specific MediaTek chipsets such as the MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915. The flaw allows an attacker to exploit the mishandling of the WPS protocol, potentially exposing sensitive information or allowing unauthorized access.

References