MEDIUM🇵🇱 Wersja polska

CVE-2024-20069

CVSS 6.5v3.1pub. 2024-06-03upd. 2025-04-25

In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01286330; Issue ID: MSV-1430.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

  • Mediatek Mt6833

    HW
    Mediatek
    all versions

  • Mediatek Mt6853

    HW
    Mediatek
    all versions

  • Mediatek Mt6855

    HW
    Mediatek
    all versions

  • Mediatek Mt6873

    HW
    Mediatek
    all versions

  • Mediatek Mt6875

    HW
    Mediatek
    all versions

  • Mediatek Mt6875t

    HW
    Mediatek
    all versions

  • Mediatek Mt6877

    HW
    Mediatek
    all versions

  • Mediatek Mt6883

    HW
    Mediatek
    all versions

  • Mediatek Mt6885

    HW
    Mediatek
    all versions

  • Mediatek Mt6889

    HW
    Mediatek
    all versions

  • Mediatek Mt6891

    HW
    Mediatek
    all versions

  • Mediatek Mt6893

    HW
    Mediatek
    all versions

  • Mediatek Mt8675

    HW
    Mediatek
    all versions

  • Mediatek Mt8771

    HW
    Mediatek
    all versions

  • Mediatek Mt8791t

    HW
    Mediatek
    all versions

  • Mediatek Mt8797

    HW
    Mediatek
    all versions

  • Mediatek Nr15

    OS
    Mediatek
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-20083CRITICAL9.8PL ✓same product

Out-of-bounds write w MediaTek venc — eskalacja uprawnień lokalnie

CVE-2024-20082CRITICAL9.8PL ✓same product

Krytyczne RCE w modemie MediaTek — brak walidacji granic pamięci

CVE-2024-20080CRITICAL9.8PL ✓same product

Privilege escalation w usłudze GNSS przez nieprawidłową walidację certyfikatów

CVE-2024-20078CRITICAL9.8PL ✓same product

MediaTek venc: privilege escalation przez type confusion i zapis poza granicami

CVE-2023-32874CRITICAL9.8PL ✓same product

RCE przez out of bounds write w MediaTek Modem IMS Stack