CVE-2025-20674

Published: Jun 2, 2025Modified: Jul 18, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303.

Affected (4)

Products: Openwrt: Openwrt · Mediatek: Software Development Kit

Openwrt

1 product

Openwrt

Mediatek

1 product

Software Development Kit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openwrt Openwrt	Version 19.07.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Openwrt Openwrt	Version 21.02.0
Openwrt Openwrt	Version 23.05

Configuration C

1 vulnerable · 9 platform

Vulnerable Software	Affected Versions
Mediatek Software Development Kit	Up to 7.6.7.2

Running on/with	Platform Versions
Mediatek Mt6890	All versions
Mediatek Mt6990	All versions
Mediatek Mt7915	All versions
Mediatek Mt7916	All versions
Mediatek Mt7981	All versions
Mediatek Mt7986	All versions
Mediatek Mt7990	All versions
Mediatek Mt7992	All versions
Mediatek Mt7993	All versions

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://corp.mediatek.com/product-security-bulletin/June-2025

Source: security@mediatek.com

Vendor Advisory

Timeline

No history available yet.