Network HW: Uncaught Exception Enables Remote DoS
CVE-2025-20637 Published on February 3, 2025
In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380.
Vulnerability Analysis
CVE-2025-20637 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Uncaught Exception
An exception is thrown from a function, but it is not caught. When an exception is not caught, it may cause the program to crash or expose sensitive information.
Products Associated with CVE-2025-20637
Want to know whenever a new CVE is published for MediaTek Software Development Kit? stack.watch will email you.
Affected Versions
MediaTek, Inc. MT7981, MT7986 Version SDK release 7.6.7.0 and before is affected by CVE-2025-20637Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.