CVE-2021-31578

CVE-2021-31578: vulnerability in MediaTek, Inc. EN7528, EN7580

Published · Updated

Follow this CVE+ Monitor EN7528, EN7580

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
In short

Boa web server has a memory overflow flaw that allows someone nearby on the network to gain higher privileges without needing to interact with the system. This is dangerous because attackers can take control of the server remotely.

Technical detail

A stack buffer overflow vulnerability in Boa allows a proximal attacker to achieve privilege escalation without additional execution privileges or user interaction. The attack vector is network-based, with the flaw triggered through crafted input to the web server, resulting in arbitrary code execution with elevated privileges.

Summary generated and translated by AI from the official description.
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.
Affected products
MediaTek, Inc. · EN7528, EN7580
Related CVEs — MediaTek, Inc. EN7528, EN7580

In the same product, most dangerous first.

CVE-2021-31575CRITICALCVE-2021-31575EPSS 1.7%CVE-2021-31573CRITICALCVE-2021-31573EPSS 1.7%CVE-2021-31574CRITICALCVE-2021-31574EPSS 1.7%CVE-2022-32665CRITICALCVE-2022-32665EPSS 1.6%CVE-2021-31577—CVE-2021-31577EPSS 1.1%CVE-2021-31576—CVE-2021-31576EPSS 1.0%