CVE-2024-20137 PoC — MediaTek Chipsets 安全漏洞

Description

Python code for expoiting of vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986

介绍

# CVE-2024-20137
Python code for expoiting the vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986

MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024

NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137



# About the code
This code is written in Python 3 and uses the Scapy library to craft and send custom 802.11 authentication frames over a wireless interface. 
It simulates an authentication process involving the Simultaneous Authentication of Equals (SAE), which is part of WPA3's enhanced security mechanism.
It sends an authentication request via a protocol number that is not registered or is a vendor-specific and forces the client to deauthenticate.

文件快照

备注