VulnerabilityModified

CVE-2022-32666

This could lead to remote denial of service with no additional execution privileges needed.

HIGH 7.5EPSS 0.99%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.99%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220829014; Issue ID: GN20220829014.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.99% probability · 61th percentile
CISA KEV: Not listed
Affected: linuxfoundation/yocto · mediatek/mt7603 firmware · mediatek/mt7613 firmware · mediatek/mt7615 firmware · mediatek/mt7622 firmware · mediatek/mt7628 firmware · mediatek/mt7629 firmware · mediatek/mt7915 firmware · mediatek/mt7916 firmware · mediatek/mt7981 firmware · mediatek/mt7986 firmware · mediatek/mt8365 firmware
Source: security@mediatek.com

References

https://corp.mediatek.com/product-security-bulletin/July-2023Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/July-2023Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.