CVE-2021-37564: High severity mediatek mt7603e firmware vulnerability
Published Dec 25, 2021
·Updated
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
Affected Software
14 affected components
MediaTek Mt7603e Firmware=2.0.2
MediaTek MT7603E
MediaTek Mt7613 Firmware=2.0.2
MediaTek MT7613
MediaTek Mt7615 Firmware=2.0.2
MediaTek MT7615
MediaTek Mt7622 Firmware=2.0.2
MediaTek MT7622
MediaTek Mt7628 Firmware=2.0.2
MediaTek MT7628
MediaTek Mt7629 Firmware=2.0.2
MediaTek MT7629
MediaTek Mt7915 Firmware=2.0.2
MediaTek MT7915
Event History
Dec 25, 2021
CVE Published
via MITRE·11:23 PM
Data Sourced
via MITRE·11:23 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2021-37564?
CVE-2021-37564 is a vulnerability in MediaTek microchips that are used in NETGEAR devices through 2021-11-11 and other devices, which mishandle IEEE 1905 protocols.
2
Which chipsets are affected by CVE-2021-37564?
The affected chipsets for CVE-2021-37564 are MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915.
3
What are the affected software versions for CVE-2021-37564?
The affected software version for CVE-2021-37564 is 2.0.2.
4
What is the severity level of CVE-2021-37564?
The severity level of CVE-2021-37564 is high with a severity value of 7.5.
5
How can I fix CVE-2021-37564?
To fix CVE-2021-37564, please refer to the security advisory provided by MediaTek and NETGEAR.