WPS Protocol Vulnerability in MediaTek Chipsets Used by NETGEAR Devices
CVE-2021-37584

8.2HIGH

Key Information:

Vendor

Mediatek
Status
Mt7603e Firmware
Vendor
CVE Published:
26 December 2021

What is CVE-2021-37584?

MediaTek microchips used in various NETGEAR devices have a vulnerability that affects the handling of the Wi-Fi Protected Setup (WPS) protocol. This issue can potentially allow attackers to conduct unauthorized actions due to improper checks within the WPS implementation. The vulnerability spans multiple MediaTek chipsets, including MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915, affecting software version 7.4.0.0. Awareness and prompt actions are crucial for affected device users.

References

https://kb.netgear.com/000064368/Security-Advisory-for-Wi...
x_refsource_MISC
https://corp.mediatek.com/product-security-bulletin/Janua...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-37584 : WPS Protocol Vulnerability in MediaTek Chipsets Used by NETGEAR Devices