CVE-2021-37570

Vulnerability

An out-of-bounds read vulnerability exists in MediaTek chipsets when handling IEEE 1905 protocol packets. Affected chipsets include MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915, with software version 2.0.2 [1]. The issue occurs due to improper validation of received IEEE 1905 frames [1].

Exploitation

An unauthenticated attacker on the local network can send specially crafted IEEE 1905 packets to a vulnerable device, triggering an out-of-bounds memory read [1]. No user interaction or elevated privileges are required.

Impact

Successful exploitation allows an attacker to read out-of-bounds memory, potentially disclosing sensitive information such as Wi-Fi credentials or other data processed by the chipset [1]. The impact is limited to information disclosure; no code execution has been reported.

Mitigation

MediaTek has released patches to OEMs [1]. NETGEAR has released firmware updates for several affected products, including extenders and access points, as listed in their advisory [2]. For example, firmware versions 1.0.3.34 for EAX11v2, 1.0.0.96 for EX3700, 1.0.4.20 for WAC104, and others [2]. No workarounds are available [2]. Users should apply the latest firmware from their device vendor.