Wi-Fi Driver Vulnerability in MediaTek Products
CVE-2022-32663

7.5HIGH

Key Information:

Vendor
MediaTek
Status
Mt5221, Mt7603, Mt7613, Mt7615, Mt7622, Mt7628, Mt7629, Mt7668, Mt7902, Mt7915, Mt7916, Mt7921, Mt7981, Mt7986, Mt8167s, Mt8175, Mt8362a, Mt8365, Mt8385, Mt8518s, Mt8532, Mt8788
Vendor
CVE Published:
6 February 2023

Summary

A vulnerability exists within the Wi-Fi driver of MediaTek products, which may cause a system crash due to a null pointer dereference. Exploiting this flaw can lead to a remote denial of service, allowing attackers to disrupt the system without requiring any additional execution privileges. Importantly, user interaction is not necessary for this vulnerability to be exploited, making it a significant concern for the affected environments. Ensure your systems are updated with the latest patches to mitigate this risk.

Affected Version(s)

MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7668, MT7902, MT7915, MT7916, MT7921, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8788 7.6.6.1

References

https://corp.mediatek.com/product-security-bulletin/Febru...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.