Login Request a demo
High severity · published Jul 4, 2023
CVE-2022-32666
In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information
7.5
CVSS
1%
EPSS
No
On KEV
Description
In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220829014; Issue ID: GN20220829014.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Mt7603 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7613 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7615 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7622 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7628 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7629 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7915 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7916 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7981 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt7986 Firmware · Mediatek
7.6.6.0 · source: NVD
MF
Mt8365 Firmware · Mediatek
7.6.6.0 · source: NVD
YO
Yocto · Linuxfoundation
4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +5 more · source: NVD
Affected product
YO
Yocto
Linuxfoundation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-32666
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-32666
Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/July-2023
More from Yocto
9.8
CVE-2024-20148
In wlan STA FW, there is a possible out of bounds write due to improper input validation
9.8
CVE-2024-20080
In gnss service, there is a possible escalation of privilege due to improper certificate validation
9.8
CVE-2024-25626
Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture
8.8
CVE-2024-20040
In wlan firmware, there is a possible out of bounds write due to improper input validation
8.4
CVE-2024-20104
In da, there is a possible out of bounds write due to a missing bounds check