CVE-2022-20060

🗓️ 09 Mar 2022 17:03:05Reported by MediaTekType

CVE-2022-20060 in preloader (usb) has possible permission bypass, leading to local escalation of privilege with physical access to device. Patch ID: ALPS0616080

Reporter	Title	Published	Views	Family All 10
GithubExploit	mediatek-mt8365-preloader-exploit	4 May 202616:16	–	githubexploit
ATTACKERKB	CVE-2022-20060	10 Mar 202217:45	–	attackerkb
Circl	CVE-2022-20060	10 Mar 202220:22	–	circl
CNNVD	MediaTek 多款产品访问控制错误漏洞	10 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-20060	9 Mar 202217:03	–	cvelist
EUVD	EUVD-2022-25320	3 Oct 202520:07	–	euvd
NVD	CVE-2022-20060	10 Mar 202217:45	–	nvd
Prion	Design/Logic Flaw	10 Mar 202217:45	–	prion
Positive Technologies	PT-2022-14307 · Preloader · Preloader	9 Mar 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-20060	22 May 202522:19	–	redhatcve

NVD

Vulners

Node

google androidMatch10.0

google androidMatch11.0

google androidMatch12.0

AND

mediatek mt6761Match-

mediatek mt6762Match-

mediatek mt6765Match-

mediatek mt6768Match-

mediatek mt6771Match-

mediatek mt6779Match-

mediatek mt6781Match-

mediatek mt6785Match-

mediatek mt6833Match-

mediatek mt6853Match-

mediatek mt6873Match-

mediatek mt6875Match-

mediatek mt6877Match-

mediatek mt6885Match-

mediatek mt6889Match-

mediatek mt6893Match-

mediatek mt8183Match-

mediatek mt8185Match-

mediatek mt8321Match-

mediatek mt8385Match-

mediatek mt8666Match-

mediatek mt8667Match-

mediatek mt8675Match-

mediatek mt8735aMatch-

mediatek mt8735bMatch-

mediatek mt8765Match-

mediatek mt8766Match-

mediatek mt8768Match-

mediatek mt8786Match-

mediatek mt8788Match-

mediatek mt8789Match-

mediatek mt8791Match-

mediatek mt8797Match-

[
  {
    "product": "MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6875, MT6877, MT6885, MT6889, MT6893, MT8183, MT8185, MT8321, MT8385, MT8666, MT8667, MT8675, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797",
    "vendor": "MediaTek, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Android 10.0, 11.0, 12.0"
      }
    ]
  }
]

Source	Link
corp	www.corp.mediatek.com/product-security-bulletin/March-2022

21 Nov 2024 06:42Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.4

CVSS 3.16.6

EPSS0.00017

CWE-306