CVE-2021-31578

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-acknowledgements	Vendor Advisory
https://corp.mediatek.com/product-security-acknowledgements	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:mediatek:en7580_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:en7580:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:mediatek:en7528_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:en7528:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:05

Type	Values Removed	Values Added
Summary		(es) En Boa, existe una posible escalada de privilegios debido a un desbordamiento del búfer en la región stack de la memoria. Esto podría conducir a una escalada remota de privilegios por parte de un atacante próximo sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID de parche: A20210008; ID del problema: OSBNB00123241.
References	~~() https://corp.mediatek.com/product-security-acknowledgements - Vendor Advisory~~	() https://corp.mediatek.com/product-security-acknowledgements - Vendor Advisory

Information

Published : 2023-02-06 22:15

Updated : 2024-11-21 06:05

NVD link : CVE-2021-31578

Mitre link : CVE-2021-31578

CVE.ORG link : CVE-2021-31578

JSON object : View

Products Affected

mediatek

en7580
en7528_firmware
en7580_firmware
en7528

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2021-31578", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-02-06T22:15:09.470", "references": [{"url": "https://corp.mediatek.com/product-security-acknowledgements", "tags": ["Vendor Advisory"], "source": "security@mediatek.com"}, {"url": "https://corp.mediatek.com/product-security-acknowledgements", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241."}, {"lang": "es", "value": "En Boa, existe una posible escalada de privilegios debido a un desbordamiento del b\u00fafer en la regi\u00f3n stack de la memoria. Esto podr\u00eda conducir a una escalada remota de privilegios por parte de un atacante pr\u00f3ximo sin necesidad de privilegios de ejecuci\u00f3n adicionales. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: A20210008; ID del problema: OSBNB00123241."}], "lastModified": "2024-11-21T06:05:56.450", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mediatek:en7580_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFFE9B98-0C16-4EBF-AE99-8163F19FD28C", "versionEndExcluding": "tlm7.3.275.0-64"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:en7580:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "061DBB68-80AF-4016-AAE0-EE9DFDFB341B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mediatek:en7528_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D77F5BED-66A1-48F5-B662-A187C1D89E99", "versionEndExcluding": "tlm7.3.275.0-64"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:en7528:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CD990C82-4C61-479B-A49F-11A3C0812AC5"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@mediatek.com"}