CVE-2021-31576: High severity mediatek en7580 firmware vulnerability
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31576?
CVE-2021-31576 has been classified as a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2021-31576?
To fix CVE-2021-31576, apply the patch identified as A20210008 provided by Mediatek.
What kind of attacks can exploit CVE-2021-31576?
CVE-2021-31576 can be exploited by a proximal attacker to gain unauthorized access to sensitive information.
Is user interaction required to exploit CVE-2021-31576?
No, user interaction is not needed for the exploitation of CVE-2021-31576.
Which products are affected by CVE-2021-31576?
CVE-2021-31576 affects Mediatek En7580 and En7528 firmware versions prior to tlm7.3.275.0-64.