Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2021-37567 Details
Description
MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read).
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mediatek mt7603e firmware | 2.0.2 |
CPE
Remediation
| |
| mediatek mt7603e | All versions |
CPE
Remediation
| |
| mediatek mt7613 firmware | 2.0.2 |
CPE
Remediation
| |
| mediatek mt7613 | All versions |
CPE
Remediation
| |
| mediatek mt7615 firmware | 2.0.2 |
CPE
Remediation
| |
| mediatek mt7615 | All versions |
CPE
Remediation
| |
| mediatek mt7622 firmware | 2.0.2 |
CPE
Remediation
| |
| mediatek mt7622 | All versions |
CPE
Remediation
| |
| mediatek mt7628 firmware | 2.0.2 |
CPE
Remediation
| |
| mediatek mt7628 | All versions |
CPE
Remediation
| |
| mediatek mt7629 firmware | 2.0.2 |
CPE
Remediation
| |
| mediatek mt7629 | All versions |
CPE
Remediation
| |
| mediatek mt7915 firmware | 2.0.2 |
CPE
Remediation
| |
| mediatek mt7915 | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 10, 2022 | Initial Analysis | [email protected] |
| Jan 5, 2022 | CVE Modified | [email protected] |