CVE-2021-37570

January 6, 2022

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).

Summary:

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).

Reference Links(if available):

  • https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300
  • https://corp.mediatek.com/product-security-bulletin/January-2022

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • You may have missed

    Cobalt Strike

    Cobalt Strike Beacon Detected – 111[.]229[.]148[.]68:1443

    November 5, 2024
    Cobalt Strike

    Cobalt Strike Beacon Detected – 47[.]94[.]168[.]145:9999

    November 5, 2024
    Cobalt Strike

    Cobalt Strike Beacon Detected – 167[.]71[.]207[.]129:8080

    November 5, 2024
    Cobalt Strike

    Cobalt Strike Beacon Detected – 101[.]91[.]125[.]228:443

    November 5, 2024
    image

    [RHYSIDA] – Ransomware Victim: Fylde Coast Academy Trust

    November 5, 2024