CVE-2022-20054

🗓️ 09 Mar 2022 17:02:36Reported by MediaTekType

Possible AT command injection in ims service, leading to local privilege escalation without additional execution privileges needed

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-20054	10 Mar 202217:45	–	attackerkb
CNNVD	MediaTek 多款产品命令注入漏洞	10 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-20054	9 Mar 202217:02	–	cvelist
EUVD	EUVD-2022-25314	3 Oct 202520:07	–	euvd
NVD	CVE-2022-20054	10 Mar 202217:45	–	nvd
OSV	CVE-2022-20054	10 Mar 202217:45	–	osv
Prion	Command injection	10 Mar 202217:45	–	prion
Positive Technologies	PT-2022-14301 · Mediatek +1 · Mt6580 +1	9 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-20054	22 May 202522:19	–	redhatcve

NVD

Vulners

Node

google androidMatch9.0

google androidMatch10.0

google androidMatch11.0

google androidMatch12.0

AND

mediatek mt6580Match-

mediatek mt6739Match-

mediatek mt6750Match-

mediatek mt6761Match-

mediatek mt6762Match-

mediatek mt6763Match-

mediatek mt6765Match-

mediatek mt6768Match-

mediatek mt6771Match-

mediatek mt6779Match-

mediatek mt8167Match-

mediatek mt8168Match-

mediatek mt8173Match-

mediatek mt8183Match-

mediatek mt8185Match-

mediatek mt8321Match-

mediatek mt8362aMatch-

mediatek mt8365Match-

mediatek mt8385Match-

mediatek mt8666Match-

mediatek mt8667Match-

mediatek mt8675Match-

mediatek mt8765Match-

mediatek mt8766Match-

mediatek mt8768Match-

mediatek mt8786Match-

mediatek mt8788Match-

mediatek mt8789Match-

mediatek mt8791Match-

mediatek mt8797Match-

[
  {
    "product": "MT6580, MT6739, MT6750, MT6761, MT6762, MT6763, MT6765, MT6768, MT6771, MT6779, MT8167, MT8168, MT8173, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 9.0, 10.0, 11.0, 12.0"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/March-2022

21 Nov 2024 06:42Current

7.9High risk

Vulners AI Score7.9

CVSS 24.6

CVSS 3.17.8

EPSS0.00041

CWE-862