CVE-2024-20069

In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01286330; Issue ID: MSV-1430.

• CWE-757

• https://corp.mediatek.com/product-security-bulletin/June-2024Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/June-2024Vendor Advisory

Published

Jun 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20060In da, there is a possible escalation of privilege due to an…5.9
• CVE-2024-20064In wlan service, there is a possible out of bounds write due…7.8
• CVE-2024-20065In telephony, there is a possible information disclosure due…4
• CVE-2024-20066In modem, there is a possible out of bounds write due to an …7.5
• CVE-2024-20067In modem, there is a possible out of bounds write due to imp…9.8
• CVE-2024-20068In modem, there is a possible system crash due to improper i…5.9
• CVE-2024-2007A vulnerability was found in OpenBMB XAgent 1.0.0. It has be…8.8
• CVE-2024-20070In modem, there is a possible information disclosure due to …5.1
• CVE-2024-20071In wlan driver, there is a possible out of bounds read due t…4.4
• CVE-2024-20072In wlan driver, there is a possible out of bounds write due …6.6
• CVE-2024-20073In wlan service, there is a possible out of bounds write due…6.6
• CVE-2024-20074In dmc, there is a possible out of bounds write due to a mis…6.6