CVE-2023-32831 — Use of Insufficiently Random Values in Software Development KIT

CWE-330 — Use of Insufficiently Random Values3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 87.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mediatek Software Development KIT
Timeline
PublishedJan 2

Description

In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2023-32831: In wlan driver, there is a possible PIN crack due to use of insufficiently random values↗2024-01-02
▶
GHSA
GHSA-w86q-6fxq-gcmr: In wlan driver, there is a possible PIN crack due to use of insufficiently random values↗2024-01-02
▶
CVE-2023-32831 — Use of Insufficiently Random Values | cvebase