Critical Vulnerability: Inadequate Message Integrity Check Validation in Microchip MiWi Software

Critical Vulnerability: Inadequate Message Integrity Check Validation in Microchip MiWi Software

CVE-2021-37605 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.

Learn more about our Web Application Penetration Testing UK.