CVE-2021-37567: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affe...

Summary

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
mediatek	mt7603e_firmware	2.0.2 `cpe:2.3:o:mediatek:mt7603e_firmware:2.0.2:::::::*`
mediatek	mt7613_firmware	2.0.2 `cpe:2.3:o:mediatek:mt7613_firmware:2.0.2:::::::*`
mediatek	mt7615_firmware	2.0.2 `cpe:2.3:o:mediatek:mt7615_firmware:2.0.2:::::::*`
mediatek	mt7622_firmware	2.0.2 `cpe:2.3:o:mediatek:mt7622_firmware:2.0.2:::::::*`
mediatek	mt7628_firmware	2.0.2 `cpe:2.3:o:mediatek:mt7628_firmware:2.0.2:::::::*`
mediatek	mt7629_firmware	2.0.2 `cpe:2.3:o:mediatek:mt7629_firmware:2.0.2:::::::*`
mediatek	mt7915_firmware	2.0.2 `cpe:2.3:o:mediatek:mt7915_firmware:2.0.2:::::::*`

Original advisory text

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affe...

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).

References

https://corp.mediatek.com/product-security-bulletin/January-2022 Vendor Advisory
https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vu... Third Party Advisory