CVE-2022-32666

moderate-risk

Published 2023-07-04

In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220829014; Issue ID: GN20220829014.

Do I need to act?

2.9% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (12)

Yocto

Mt7603 Firmware

Mt7613 Firmware

Mt7615 Firmware

Mt7622 Firmware

Mt7628 Firmware

Mt7629 Firmware

Mt7915 Firmware

Mt7916 Firmware

Mt7981 Firmware

Mt7986 Firmware

Mt8365 Firmware

Affected Vendors

Linuxfoundation Mediatek

References (2)

Vendor Advisory https://corp.mediatek.com/product-security-bulletin/July-2023

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 6/34 · Minimal

Exposure 17/34 · Moderate