Lucene search

MediaTekCVE-2022-20053

HistoryMar 10, 2022 - 5:45 p.m.

CVE-2022-20053

2022-03-1017:45:04

CWE-862

MediaTek

web.nvd.nist.gov

134

cve-2022-20053

ims service

privilege escalation

missing permission check

local escalation

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

Percentile

5.1%

JSON

In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219097; Issue ID: ALPS06219097.

Affected configurations

Nvd

Vulners

Node

googleandroidMatch9.0

googleandroidMatch10.0

googleandroidMatch11.0

googleandroidMatch12.0

AND

mediatekmt6731Match-

mediatekmt6732Match-

mediatekmt6735Match-

mediatekmt6737Match-

mediatekmt6739Match-

mediatekmt6750Match-

mediatekmt6750sMatch-

mediatekmt6752Match-

mediatekmt6753Match-

mediatekmt6755Match-

mediatekmt6755sMatch-

mediatekmt6757Match-

mediatekmt6758Match-

mediatekmt6761Match-

mediatekmt6762Match-

mediatekmt6763Match-

mediatekmt6765Match-

mediatekmt6768Match-

mediatekmt6769Match-

mediatekmt6771Match-

mediatekmt6779Match-

mediatekmt6781Match-

mediatekmt6785Match-

mediatekmt6795Match-

mediatekmt6797Match-

mediatekmt6799Match-

mediatekmt6833Match-

mediatekmt6853Match-

mediatekmt6853tMatch-

mediatekmt6873Match-

mediatekmt6875Match-

mediatekmt6877Match-

mediatekmt6880Match-

mediatekmt6883Match-

mediatekmt6885Match-

mediatekmt6889Match-

mediatekmt6890Match-

mediatekmt6891Match-

mediatekmt6893Match-

mediatekmt8167Match-

mediatekmt8168Match-

mediatekmt8173Match-

mediatekmt8183Match-

mediatekmt8185Match-

mediatekmt8321Match-

mediatekmt8362aMatch-

mediatekmt8365Match-

mediatekmt8385Match-

mediatekmt8666Match-

mediatekmt8667Match-

mediatekmt8675Match-

mediatekmt8765Match-

mediatekmt8766Match-

mediatekmt8768Match-

mediatekmt8786Match-

mediatekmt8788Match-

mediatekmt8789Match-

mediatekmt8791Match-

mediatekmt8797Match-

VendorProductVersionCPE
googleandroid9.0cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
googleandroid10.0cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
googleandroid11.0cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
googleandroid12.0cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*
mediatekmt6731-cpe:2.3:h:mediatek:mt6731:-:*:*:*:*:*:*:*
mediatekmt6732-cpe:2.3:h:mediatek:mt6732:-:*:*:*:*:*:*:*
mediatekmt6735-cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*
mediatekmt6737-cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*
mediatekmt6739-cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*
mediatekmt6750-cpe:2.3:h:mediatek:mt6750:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	9.0	cpe:2.3:o:google:android:9.0:::::::*
google	android	10.0	cpe:2.3:o:google:android:10.0:::::::*
google	android	11.0	cpe:2.3:o:google:android:11.0:::::::*
google	android	12.0	cpe:2.3:o:google:android:12.0:::::::*
mediatek	mt6731	-	cpe:2.3:h:mediatek:mt6731:-:::::::*
mediatek	mt6732	-	cpe:2.3:h:mediatek:mt6732:-:::::::*
mediatek	mt6735	-	cpe:2.3:h:mediatek:mt6735:-:::::::*
mediatek	mt6737	-	cpe:2.3:h:mediatek:mt6737:-:::::::*
mediatek	mt6739	-	cpe:2.3:h:mediatek:mt6739:-:::::::*
mediatek	mt6750	-	cpe:2.3:h:mediatek:mt6750:-:::::::*

Rows per page:

1-10 of 631

CNA Affected

[
  {
    "product": "MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6755S, MT6757, MT6758, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8167, MT8168, MT8173, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 9.0, 10.0, 11.0, 12.0"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/March-2022

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-20053