CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-20637: In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional...

Description

In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380.

Classification

CVE ID: CVE-2025-20637

Affected Products

Vendor: MediaTek, Inc.

Product: MT7981, MT7986

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 19.82% (scored less or equal to compared to others)

EPSS Date: 2025-03-04 (when was this score calculated)

References

https://corp.mediatek.com/product-security-bulletin/February-2025

Timeline