CVE-2019-18989 - CVE House
Back to Database
Status published Medium CVE-2019-18989

A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06...

Vulnerability Description

A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which would allow an attacker to discern information or potentially modify data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18989

Credits & Attribution

No credits recorded in the NVD database.

References

More from mediatek

View All →
CVE-2021-41789
In wifi driver, there is a possible system crash due...
Medium 6.5
CVE-2021-41788
MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and...
Medium 6.5
CVE-2021-40148
In Modem EMM, there is a possible information disclosure due...
High 7.5
CVE-2021-37584
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and...
High 8.2
CVE-2021-37583
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and...
High 8.2

Affected Vendor

Affected Software

mt7620n firmware
Vulnerable Versions:
1.06

Timeline

Official Publish: September 30th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:N/S:C/UI:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.