deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-44540
Published: 2021-12-23
Description: A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C; https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=652b4b7cb0; https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C
CVE: CVE-2021-44541
Published: 2021-12-23
Description: A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C; https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=652b4b7cb0; https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C
CVE: CVE-2021-44542
Published: 2021-12-23
Description: A memory leak vulnerability was found in Privoxy when handling errors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C; https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=c48d1d6d08; https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C
CVE: CVE-2021-44543
Published: 2021-12-23
Description: An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C; https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=0e668e9409c; https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C
CVE: CVE-2021-4024
Published: 2021-12-23
Description: A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a Podman process) spawns a `gvproxy` process on the host system. The `gvproxy` API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall, an attacker can potentially use the `gvproxy` API to forward ports on the host to ports in the VM, making private services on the VM accessible to the network. This issue could be also used to interrupt the host's services by forwarding all ports to the VM.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-200, CWE-346
References: https://bugzilla.redhat.com/show_bug.cgi?id=2026675%2C; https://github.com/containers/podman/releases/tag/v3.4.3; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QFFVJ6S3ZRMPDYB7KYAWEMDHXFZYQPU3/
CVE: CVE-2021-3621
Published: 2021-12-23
Description: A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root access. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://bugzilla.redhat.com/show_bug.cgi?id=1975142; https://lists.debian.org/debian-lts-announce/2023/05/msg00028.html; https://sssd.io/release-notes/sssd-2.6.0.html
CVE: CVE-2021-3622
Published: 2021-12-23
Description: A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://bugzilla.redhat.com/show_bug.cgi?id=1975489; https://github.com/libguestfs/hivex/commit/771728218dac2fbf6997a7e53225e75a4c6b7255; https://listman.redhat.com/archives/libguestfs/2021-August/msg00002.html
CVE: CVE-2021-45470
Published: 2021-12-23
Description: lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular expression denial of service) or other impacts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207; https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0; https://github.com/cve-search/cve-search/pull/629
CVE: CVE-2020-35398
Published: 2021-12-23
Description: An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumeration of usernames determined by the error message returned after invalid credentials are attempted.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/; https://play.google.com/store/apps/details?id=com.utimutualfunds.utimutualfund&hl=en_IN&gl=US; https://cvewalkthrough.com/cve-2020-35398-uti-mutual-fund-android-application-username-enumeration/
CVE: CVE-2021-45471
Published: 2021-12-24
Description: In MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.
CVSS Score: 5.3 (MEDIUM)
References: https://gerrit.wikimedia.org/r/q/Iac86cf63bd014ef99e83dccfce9b8942e15d2bf9; https://gerrit.wikimedia.org/r/q/Id9af124427bcd1e85301d2140a38bf47bbc5622c; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7JNQA53K675TQBBJPZRAG5ZT6XES3IS/
CVE: CVE-2021-45472
Published: 2021-12-24
Description: In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that includes a $1 formatter substitution marker, and the javascript: URL scheme (among others) can be used.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/I37ece1dfdc80d38055067c9c4fa73ba591acd8bd; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7JNQA53K675TQBBJPZRAG5ZT6XES3IS/; https://phabricator.wikimedia.org/T297570
CVE: CVE-2021-45473
Published: 2021-12-24
Description: In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL (aka a page-information sidebar).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/I3cd080a1a7dacd7396d37ee0c98cff0b4e241f8d; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7JNQA53K675TQBBJPZRAG5ZT6XES3IS/; https://phabricator.wikimedia.org/T294693
CVE: CVE-2021-45474
Published: 2021-12-24
Description: In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gerrit.wikimedia.org/r/q/Id1c8910aeac5b452fbabeddab[PII_REDACTED]8223e; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7JNQA53K675TQBBJPZRAG5ZT6XES3IS/; https://phabricator.wikimedia.org/T296605
CVE: CVE-2021-20826
Published: 2021-12-24
Description: Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier) allows an attacker to obtain the PLC Web server user credentials from the communication between the PLC and the software. As a result, the complete access privileges to the PLC Web server may be obtained, and manipulation of the PLC output and/or suspension of the PLC may be conducted.
CVSS Score: 7.6 (HIGH)
CWE: CWE-522
References: https://jvn.jp/en/vu/JVNVU92279973/index.html; https://www.idec.com/home/lp/pdf/2021-12-24-PLC.pdf; https://jvn.jp/en/vu/JVNVU92279973/index.html
CVE: CVE-2021-20827
Published: 2021-12-24
Description: Plaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier) allows an attacker to obtain the PLC Web server user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the attacker may access the PLC Web server and hijack the PLC, and manipulation of the PLC output and/or suspension of the PLC may be conducted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://jvn.jp/en/vu/JVNVU92279973/index.html; https://www.idec.com/home/lp/pdf/2021-12-24-PLC.pdf; https://jvn.jp/en/vu/JVNVU92279973/index.html
CVE: CVE-2021-20874
Published: 2021-12-24
Description: Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain sensitive information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://groupsession.jp/info/info-news/security20211220; https://jvn.jp/en/jp/JVN79798166/index.html; https://groupsession.jp/info/info-news/security20211220
CVE: CVE-2021-20875
Published: 2021-12-24
Description: Open redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks by having a user to access a specially crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://groupsession.jp/info/info-news/security20211220; https://jvn.jp/en/jp/JVN79798166/index.html; https://groupsession.jp/info/info-news/security20211220
CVE: CVE-2021-20876
Published: 2021-12-24
Description: Path traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows an attacker with an administrative privilege to obtain sensitive information stored in the hierarchy above the directory on the published site's server via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://groupsession.jp/info/info-news/security20211220; https://jvn.jp/en/jp/JVN79798166/index.html; https://groupsession.jp/info/info-news/security20211220
CVE: CVE-2021-23772
Published: 2021-12-24
Description: This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: https://github.com/kataras/iris/commit/e213dba0d32ff66653e0ef124bc[PII_REDACTED]b08; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMKATARASIRIS-2325169; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMKATARASIRISV12-2325170
CVE: CVE-2021-4072
Published: 2021-12-24
Description: elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/elgg/elgg/commit/c30b17bf75256ed3fcc84e2083147cc3951423d0; https://huntr.dev/bounties/74034253-732a-4251-a0f9-eca5f576c955; https://github.com/elgg/elgg/commit/c30b17bf75256ed3fcc84e2083147cc3951423d0
CVE: CVE-2021-23490
Published: 2021-12-24
Description: The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/thlorenz/parse-link-header/commit/72f05c717b3f129c5331a07bf300ed8886eb8ae1; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2321973; https://snyk.io/vuln/SNYK-JS-PARSELINKHEADER-1582783
CVE: CVE-2021-23574
Published: 2021-12-24
Description: All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of [CVE-2020-28442](https://snyk.io/vuln/SNYK-JS-JSDATA-1023655).
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://github.com/js-data/js-data/blob/master/dist/js-data.js%23L472; https://github.com/js-data/js-data/issues/576; https://github.com/js-data/js-data/issues/577
CVE: CVE-2021-3977
Published: 2021-12-24
Description: invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/invoiceninja/invoiceninja/commit/1186eaa82375692d01d5ef3369c5b7bc7315b55f; https://huntr.dev/bounties/99c4ed09-b66f-474a-bd74-eeccf9339fde; https://github.com/invoiceninja/invoiceninja/commit/1186eaa82375692d01d5ef3369c5b7bc7315b55f
CVE: CVE-2021-45480
Published: 2021-12-24
Description: An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the __rds_conn_create() function in net/rds/connection.c in a certain combination of circumstances.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.11; https://github.com/torvalds/linux/commit/5f9562ebe710c307adc5f666bf1a2162ee7977c0; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
CVE: CVE-2021-45481
Published: 2021-12-25
Description: In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segmentation violation and application crash, a different vulnerability than CVE-2021-30889.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3; http://www.openwall.com/lists/oss-security/2022/01/21/2
CVE: CVE-2021-45482
Published: 2021-12-25
Description: In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3; http://www.openwall.com/lists/oss-security/2022/01/21/2
CVE: CVE-2021-45483
Published: 2021-12-25
Description: In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://github.com/ChijinZ/security_advisories/tree/master/webkitgtk-2.32.3; http://www.openwall.com/lists/oss-security/2022/01/21/2
CVE: CVE-2021-45484
Published: 2021-12-25
Description: In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc; https://arxiv.org/pdf/2112.09604.pdf; http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc
CVE: CVE-2021-45485
Published: 2021-12-25
Description: In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://arxiv.org/pdf/2112.09604.pdf; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=62f20e068ccc50d6ab66fdb72ba90da2b9418c99
CVE: CVE-2021-45486
Published: 2021-12-25
Description: In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.
CVSS Score: 3.5 (LOW)
CWE: CWE-327
References: https://arxiv.org/pdf/2112.09604.pdf; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4; https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/net/ipv4/route.c?id=aa6dd211e4b1dde9d5dc25d699d35f789ae7eeba
CVE: CVE-2021-45487
Published: 2021-12-25
Description: In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc; https://arxiv.org/pdf/2112.09604.pdf; http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc
CVE: CVE-2021-45488
Published: 2021-12-25
Description: In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc; https://arxiv.org/pdf/2112.09604.pdf; http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc
CVE: CVE-2021-45489
Published: 2021-12-25
Description: In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc; https://arxiv.org/pdf/2112.09604.pdf; http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2021-001.txt.asc
CVE: CVE-2021-4162
Published: 2021-12-25
Description: archivy is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/archivy/archivy/commit/796c3ae318eea183fc88c87ec5a27355b0f6a99d; https://huntr.dev/bounties/e204a768-2129-4b6f-abad-e436309c7c32; https://github.com/archivy/archivy/commit/796c3ae318eea183fc88c87ec5a27355b0f6a99d
CVE: CVE-2021-4166
Published: 2021-12-25
Description: vim is vulnerable to Out-of-bounds Read
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: http://seclists.org/fulldisclosure/2022/Jul/14; http://seclists.org/fulldisclosure/2022/Mar/29; http://seclists.org/fulldisclosure/2022/May/35
CVE: CVE-2021-32467
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-32468
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-32469
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 Affected Software Versions 7.4.0.0; Out-of-bounds read).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-35055
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37560
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37561
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37562
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37563
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-37564
Published: 2021-12-26
Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300; https://corp.mediatek.com/product-security-bulletin/January-2022