Vulnerability details
CVE-2024-20137
MediaTek MT6890mediatek mt6890mediatek mt7622mediatek mt7915mediatek mt7916mediatek mt7981
CVSS 3.1
7.5High
Official description
In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00384543; Issue ID: MSV-1727.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| MediaTek, Inc. | MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 | SDK release 7.4.0.1 (MT7915) and 7.6.7.2 (MT7916, MT798X) and before | CVEProject cvelistV5 (CNA) |
| mediatek | mt6890 | All | CISA ADP / Vulnrichment |
| mediatek | mt7622 | All | CISA ADP / Vulnrichment |
| mediatek | mt7915 | All | CISA ADP / Vulnrichment |
| mediatek | mt7916 | All | CISA ADP / Vulnrichment |
| mediatek | mt7981 | All | CISA ADP / Vulnrichment |
| mediatek | mt7986 | All | CISA ADP / Vulnrichment |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2024-12-02
- Last updated
- 2024-12-02
- State
- Published
- Assigner (CNA)
- MediaTek
Exploit prediction (EPSS)
1.27%
Probability of exploitation in 30 days
70%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-248Uncaught Exception