CVE-2021-37605

High

In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four…

mitre·CWE-670·Published 2021-08-05

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

173 chars

In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.

NVDen

173 chars

In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.

En la versión 6.5 del software Microchip MiWi y en todas las versiones anteriores, incluidos los productos heredados, la pila sólo valida dos de los cuatro bytes de comprobación de integridad de mensajes (MIC)

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N