CVE-2021-32468

Vulnerability

An out-of-bounds read vulnerability exists in the WPS protocol handling of MediaTek chipsets (MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915) as used in NETGEAR devices and other products. The issue affects software version 7.4.0.0. The vulnerability occurs when processing WPS messages, allowing an attacker to read memory beyond the intended buffer.

Exploitation

An attacker with network access to the affected device can send specially crafted WPS messages to trigger the out-of-bounds read. No authentication or user interaction is required. The attack can be performed remotely over Wi-Fi.

Impact

Successful exploitation allows an attacker to read out-of-bounds memory, potentially leading to the disclosure of sensitive information such as cryptographic keys or other data. The vulnerability is classified as medium severity according to MediaTek's severity ratings [1].

Mitigation

NETGEAR has released firmware updates for many affected products, including EAX11v2 (version 1.0.3.34), EX3700 (version 1.0.0.96), and WAX202 (version 1.0.5.1) among others [2]. Users should update to the latest firmware. No workarounds are available. For devices without a fix, consider disabling WPS if possible.