Skip to content
OpenAdvisories
Medium · 5.1 CVE-2024-20070 EUVD-2024-17785GHSA-247v-cg43-r8xg

In modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establishment negotiation…

Published Jun 3, 2024 · Updated Nov 15, 2024 · Assigned by MediaTek

Description

In modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establishment negotiation. This could lead to remote information disclosure, when weak encryption algorithm is used, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00942482; Issue ID: MSV-1469.

Affected products

VendorProductAffectedFixed
MediaTek MT6298, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6878, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT69 Modem NR15, NR16, NR17 —

References