CVE-2024-20137 PoC — MediaTek Chipsets 安全漏洞

Source

Associated Vulnerability

Description

Python code for expoiting of vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986

Readme

# CVE-2024-20137
Python code for expoiting the vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986

MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024

NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137



# About the code
This code is written in Python 3 and uses the Scapy library to craft and send custom 802.11 authentication frames over a wireless interface. 
It simulates an authentication process involving the Simultaneous Authentication of Equals (SAE), which is part of WPA3's enhanced security mechanism.
It sends an authentication request via a protocol number that is not registered or is a vendor-specific and forces the client to deauthenticate.

File Snapshot

 [4.0K]  /data/pocs/8eaa7d5fc2c4835656276360bf710986f53f380b
├── [ 918]  code.py
└── [ 730]  README.md

0 directories, 2 files

Remarks