{"id":"CVE-2023-32831","state":"PUBLISHED","title":"In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User ","description":"In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868.","publishedAt":"2024-01-02T02:50:09.278Z","updatedAt":"2025-06-18T14:59:42.129Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"MediaTek","products":["MediaTek, Inc. MT6890, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986"],"affected":[{"vendor":"MediaTek, Inc.","product":"MT6890, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986","versions":[{"version":"SDK version 7.6.7.1 and before","status":"affected"}]}],"references":["https://corp.mediatek.com/product-security-bulletin/January-2024"],"weaknesses":["CWE-330"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/32xxx/CVE-2023-32831.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-32831","state":"PUBLISHED","datePublished":"2024-01-02T02:50:09.278Z","dateUpdated":"2025-06-18T14:59:42.129Z","assignerShortName":"MediaTek","assignerOrgId":"ee979b05-11f8-4f25-a7e0-a1fa9c190374","dateReserved":"2023-05-16T03:04:32.150Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868."}],"affected":[{"vendor":"MediaTek, Inc.","product":"MT6890, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986","versions":[{"version":"SDK version 7.6.7.1 and before","status":"affected"}]}],"references":[{"url":"https://corp.mediatek.com/product-security-bulletin/January-2024"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"Information Disclosure"}]}],"providerMetadata":{"shortName":"MediaTek","orgId":"ee979b05-11f8-4f25-a7e0-a1fa9c190374","dateUpdated":"2024-01-02T02:50:09.278Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://corp.mediatek.com/product-security-bulletin/January-2024","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T15:25:37.007Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-01-02T19:59:35.749491Z","id":"CVE-2023-32831","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-330","type":"CWE","lang":"en","description":"CWE-330 Use of Insufficiently Random Values"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-18T14:59:42.129Z"}}]}}}