Vulnerability

CVE-2024-20153

Component: WIFI
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Impact

Severity (Manufact.)

MEDIUM

Severity (NIST)

N/A

Severity (Android)

N/A

Chipsets

6

Devices

5

Affected Hardware

NameAlso known asManufacturer
MT8781
Helio G99
MediaTek
MT8798
Dimensity 9000+
MediaTek
MT6989
Dimensity 9300
MediaTek
MT8798
Dimensity 9000
MediaTek
MT8796
Dimensity 9300
MediaTek
MT6991
Dimensity 9400
MediaTek
6 of 6 row(s) shown.

Rows per page

Page 1 of 1

Timeline

Introduced (est):
Oct 1, 2021
Reported:
Unknown
Advisory Published:
Jan 6, 2025
CVE Published:
N/A
Android Patch Level:
None
For more information and a detailed analysis of the data presented on this website, please see our paper, to be presented at NDSS'25.
Follow us on Twitter