High severity · published Dec 2, 2024
CVE-2024-20137
In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00384543; Issue ID: MSV-1727.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 · MediaTek, Inc.
SDK release 7.4.0.1 (MT7915) and 7.6.7.2 (MT7916, MT798X) and before · source: vendor
MT
Mt6890 · Mediatek
0 · source: CISA
MT
Mt7622 · Mediatek
0 · source: CISA
MT
Mt7915 · Mediatek
0 · source: CISA
MT
Mt7916 · Mediatek
0 · source: CISA
MT
Mt7981 · Mediatek
0 · source: CISA
MT
Mt7986 · Mediatek
0 · source: CISA
Affected product
MM
MT6890, MT7622, MT7915, MT7916, MT7981, MT7986
MediaTek, Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-20137
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-20137
corp.mediatek.com
https://corp.mediatek.com/product-security-bulletin/December-2024
More from MT6890, MT7622, MT7915, MT7916, MT7981, MT7986
9.8
CVE-2025-20654
In wlan service, there is a possible out of bounds write due to an incorrect bounds check