CVE-2023-20820 (published 2023-09-04T02:27:15.884Z)
In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.
Affected products: Vendor: MediaTek, Inc.
Product: MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986, MT7990
Versions: OpenWRT 19.07, 21.02