« Volver al listado

CVE-2021-31578

Estado: ModificadaCrítica (9.8)—

In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Mediatek — En7528 FirmwareMediatek — En7580 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-31578",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@mediatek.com",
      "affectedData": [
        {
          "vendor": "MediaTek, Inc.",
          "product": "EN7528, EN7580",
          "versions": [
            {
              "status": "affected",
              "version": "Linux SDK versions less than TLM7.3.275.0-64"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-02-06T22:15:09.470",
  "references": [
    {
      "url": "https://corp.mediatek.com/product-security-acknowledgements",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@mediatek.com"
    },
    {
      "url": "https://corp.mediatek.com/product-security-acknowledgements",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241."
    },
    {
      "lang": "es",
      "value": "En Boa, existe una posible escalada de privilegios debido a un desbordamiento del búfer en la región stack de la memoria. Esto podría conducir a una escalada remota de privilegios por parte de un atacante próximo sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID de parche: A20210008; ID del problema: OSBNB00123241."
    }
  ],
  "lastModified": "2026-06-17T03:52:01.803",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:en7580_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFFE9B98-0C16-4EBF-AE99-8163F19FD28C",
              "versionEndExcluding": "tlm7.3.275.0-64"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:en7580:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "061DBB68-80AF-4016-AAE0-EE9DFDFB341B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:en7528_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D77F5BED-66A1-48F5-B662-A187C1D89E99",
              "versionEndExcluding": "tlm7.3.275.0-64"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:en7528:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CD990C82-4C61-479B-A49F-11A3C0812AC5"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@mediatek.com"
}