CVEvulnerability

CVE-2024-20153

7.5 HIGH Published 2025-01-06 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-304

Description

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598.

Affected configurations

• linuxfoundation yocto 3.3 • linuxfoundation yocto 4.0 • linuxfoundation yocto 5.0 • mediatek software development kit (<= 3.5) • google android 14.0 • google android 15.0

Related

Weakness · CWE (1)

  • CWE-304 Missing Critical Step in Authentication weakness

References