Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-20153


In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598.


Published

2025-01-06T04:15:07.647

Last Modified

2026-01-12T16:20:48.680

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-304

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application linuxfoundation yocto 3.3 Yes
Application linuxfoundation yocto 4.0 Yes
Application linuxfoundation yocto 5.0 Yes
Application mediatek software_development_kit ≤ 3.5 Yes
Operating System google android 14.0 Yes
Operating System google android 15.0 Yes
Hardware mediatek mt2737 - No
Hardware mediatek mt6989 - No
Hardware mediatek mt6991 - No
Hardware mediatek mt7925 - No
Hardware mediatek mt8365 - No
Hardware mediatek mt8518s - No
Hardware mediatek mt8532 - No
Hardware mediatek mt8666 - No
Hardware mediatek mt8667 - No
Hardware mediatek mt8673 - No
Hardware mediatek mt8676 - No
Hardware mediatek mt8678 - No
Hardware mediatek mt8755 - No
Hardware mediatek mt8766 - No
Hardware mediatek mt8768 - No
Hardware mediatek mt8775 - No
Hardware mediatek mt8781 - No
Hardware mediatek mt8786 - No
Hardware mediatek mt8788 - No
Hardware mediatek mt8796 - No
Hardware mediatek mt8798 - No
Hardware mediatek mt8893 - No

References