MediaTek MT7620 Firmware vulnerabilities

18 CVEs affecting MediaTek MT7620 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26445, published 2022-08-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-37566, published 2021-12-26. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7610, MT7613, MT7615, MT7620, MT7622, MT7628,…
CVE-2021-37584, published 2021-12-26. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…
CVE-2021-37563, published 2021-12-26. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…
CVE-2021-37561, published 2021-12-26. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…
CVE-2021-37560, published 2021-12-26. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…
CVE-2021-35055, published 2021-12-26. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…
CVE-2021-32468, published 2021-12-26. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…
CVE-2021-37562, published 2021-12-26. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…
CVE-2021-32469, published 2021-12-26. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…
CVE-2021-32467, published 2021-12-26. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615,…

Latest

CVE-2022-26445, published 2022-08-01. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…
CVE-2022-26444, published 2022-08-01. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…
CVE-2022-26443, published 2022-08-01. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…
CVE-2022-26442, published 2022-08-01. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…
CVE-2022-26441, published 2022-08-01. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…
CVE-2022-26440, published 2022-08-01. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…
CVE-2022-26439, published 2022-08-01. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…
CVE-2022-26438, published 2022-08-01. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is…