Volerion logoVolerion
Volerion logoVolerion

MediaTek WLAN STA Spoofed SSID Vulnerability Leading to Information Disclosure

Vulnerability

A vulnerability exists in the WLAN STA driver that allows a client to be deceived into connecting to an access point (AP) with a fake SSID. This could result in remote information disclosure without requiring additional execution privileges. Exploitation does not need user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information by allowing interception or manipulation of data between the client and the spoofed access point.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
6.6
impact
0.6
exploitability
4.7
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.