CVE-2021-31576

published 2023-02-06

CVE-2021-31576: In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker…

Priority P3 41 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
mediatek	en7528_firmware	< tlm7.3.275.0-64	tlm7.3.275.0-64
mediatek	en7580_firmware	< tlm7.3.275.0-64	tlm7.3.275.0-64

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-862