CVE-2019-18989

CVE-2019-18989 is a partial authentication bypass vulnerability affecting Mediatek MT7620N devices. An attacker can send an unencrypted data frame to a WPA2-protected router, which, if successful, elicits an encrypted response, potentially allowing information disclosure or data modification. Rated Medium with a CVSS score of 5.4, this vulnerability requires adjacent network access and has low impact on confidentiality and integrity. There is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has received some community discussion and media coverage.