CVE-2021-41788 Denial of service in n/a
Attackers can cause denial of service in devices using MediaTek Wi-Fi chips by flooding authentication attempts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-41788?
CVE-2021-41788 is a medium-severity denial of service vulnerability in n/a, published on 25 Dec 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authentication flooding. (Affected Chipsets MT7603E, MT7612, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0).
Weakness: CWE-20
Which versions are affected by CVE-2021-41788?
It affects 8 products.
Products include Mediatek Mt7603e Firmware, Mediatek Mt7612 Firmware, Mediatek Mt7613 Firmware, Mediatek Mt7615 Firmware, Mediatek Mt7622 Firmware, Mediatek Mt7628 Firmware and 2 more.
How do I fix CVE-2021-41788?
No fix has been published for CVE-2021-41788 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-41788 being exploited?
There is no known exploitation of CVE-2021-41788 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-ffqm-pcf8-jwx4.