CVE-2024-20069
Quick assessment
Affected
MediaTek, Inc. MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8675, MT8771, MT8791T, MT8797
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
MediaTek 芯片是中国联发科（MediaTek）公司的MediaTek 的多款芯片。 MediaTek 芯片存在安全漏洞，该漏洞源于 modem 模块由于缺少 DH 降级检查，VoWiFi IKE 期间可能会选择安全性较低的算法。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-20069
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01286330; Issue ID: MSV-1430.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
在会话协商时选择低安全性的算法(算法降级)
Source: CVE Program / CVE List V5
Vulnerability Title
MediaTek 芯片 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MediaTek 芯片是中国联发科（MediaTek）公司的MediaTek 的多款芯片。 MediaTek 芯片存在安全漏洞，该漏洞源于 modem 模块由于缺少 DH 降级检查，VoWiFi IKE 期间可能会选择安全性较低的算法。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MediaTek, Inc. | MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8675, MT8771, MT8791T, MT8797 | Modem NR15 | - |
|
II. Public POCs for CVE-2024-20069
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-20069
请登录查看更多情报信息。
Other References for CVE-2024-20069 (1)
Same Patch Batch · MediaTek, Inc. · 2024-06-03 · 11 CVEs total
| CVE-2024-20065 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20066 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20067 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20068 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20070 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20071 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20072 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20073 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20074 | MediaTek 芯片 安全漏洞 | |
| CVE-2024-20075 | MediaTek 芯片 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-757
-
CVE-2026-89177
Howyar｜WeenyGenius - Use of Insecure Protocol -
CVE-2026-72887
Net::OAuth::Client versions before 0.32 for Perl allow the s -
CVE-2026-18691
Improper Authentication in MongoDB Intra-Cluster Connections -
CVE-2026-55953
TLS 1.2 and DTLS client accepts unoffered anonymous cipher s -
CVE-2026-4942
IBM i is Affected by Algorithm Downgrade in Transport Layer
V. Comments for CVE-2024-20069
No comments yet