CVE-2024-20069
In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01286330; Issue ID: MSV-1430.
Scoring
- CVSS base score
- 0
- EPSS probability
- 0.57%
- CWE
- CWE-757
- Published
- 2024-06-03
- Last modified
- 2026-03-13
Affected products
- MediaTek, Inc. MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT8675, MT8771, MT8791T, MT8797
Weakness type
Related vulnerabilities
- CVE-2026-72889 — Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify
- CVE-2026-72887 — Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token
- CVE-2026-18691 — Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
- CVE-2026-55953 — TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
- CVE-2026-4942 — IBM i is Affected by Algorithm Downgrade in Transport Layer Security []
- CVE-2026-53712 — SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms
- CVE-2026-48747 — Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade
- CVE-2026-54780 — CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass