CVE-2024-20153

CVE-2024-20153 is a high-severity vulnerability affecting MediaTek's WLAN STA component, allowing an attacker to trick a client into connecting to an access point with a spoofed SSID. This can lead to remote information disclosure without requiring user interaction or additional execution privileges. The vulnerability has a CVSS score of 7.5 (High) due to its network attack vector and low attack complexity, resulting in a high impact on confidentiality. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.