Lucene search

K
cve[email protected]CVE-2022-32656
HistoryFeb 06, 2023 - 8:15 p.m.

CVE-2022-32656

2023-02-0620:15:11
web.nvd.nist.gov
17
cve-2022-32656
wi-fi driver
local privilege escalation
security vulnerability
nvd
patch
gn20220705035

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705035; Issue ID: GN20220705035.

Affected configurations

NVD
Node
mediatekmt5221_firmwareMatch7.6.6.0
AND
mediatekmt5221Match-
Node
mediatekmt7603_firmwareMatch7.6.6.0
AND
mediatekmt7603Match-
Node
mediatekmt7613_firmwareMatch7.6.6.0
AND
mediatekmt7613Match-
Node
mediatekmt7615_firmwareMatch7.6.6.0
AND
mediatekmt7615Match-
Node
mediatekmt7622_firmwareMatch7.6.6.0
AND
mediatekmt7622Match-
Node
mediatekmt7628_firmwareMatch7.6.6.0
AND
mediatekmt7628Match-
Node
mediatekmt7629_firmwareMatch7.6.6.0
AND
mediatekmt7629Match-
Node
mediatekmt7663_firmwareMatch7.6.6.0
AND
mediatekmt7663Match-
Node
mediatekmt7668_firmwareMatch7.6.6.0
AND
mediatekmt7668Match-
Node
mediatekmt7682_firmwareMatch7.6.6.0
AND
mediatekmt7682Match-
Node
mediatekmt7686_firmwareMatch7.6.6.0
AND
mediatekmt7686Match-
Node
mediatekmt7687_firmwareMatch7.6.6.0
AND
mediatekmt7687Match-
Node
mediatekmt7697_firmwareMatch7.6.6.0
AND
mediatekmt7697Match-
Node
mediatekmt7902_firmwareMatch7.6.6.0
AND
mediatekmt7902Match-
Node
mediatekmt7915_firmwareMatch7.6.6.0
AND
mediatekmt7915Match-
Node
mediatekmt7916_firmwareMatch7.6.6.0
AND
mediatekmt7916Match-
Node
mediatekmt7921_firmwareMatch7.6.6.0
AND
mediatekmt7921Match-
Node
mediatekmt7933_firmwareMatch7.6.6.0
AND
mediatekmt7933Match-
Node
mediatekmt7981_firmwareMatch7.6.6.0
AND
mediatekmt7981Match-
Node
mediatekmt7986_firmwareMatch7.6.6.0
AND
mediatekmt7986Match-
Node
mediatekmt8167s_firmwareMatch7.6.6.0
AND
mediatekmt8167sMatch-
Node
mediatekmt8175_firmwareMatch7.6.6.0
AND
mediatekmt8175Match-
Node
mediatekmt8362a_firmwareMatch7.6.6.0
AND
mediatekmt8362aMatch-
Node
mediatekmt8365_firmwareMatch7.6.6.0
AND
mediatekmt8365Match-
Node
mediatekmt8385_firmwareMatch7.6.6.0
AND
mediatekmt8385Match-
Node
mediatekmt8518s_firmwareMatch7.6.6.0
AND
mediatekmt8518sMatch-
Node
mediatekmt8532_firmwareMatch7.6.6.0
AND
mediatekmt8532Match-
Node
mediatekmt8695_firmwareMatch7.6.6.0
AND
mediatekmt8695Match-
Node
mediatekmt8696_firmwareMatch7.6.6.0
AND
mediatekmt8696Match-
Node
mediatekmt8788_firmwareMatch7.6.6.0
AND
mediatekmt8788Match-

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8695, MT8696, MT8788",
    "versions": [
      {
        "version": "7.6.6.0",
        "status": "affected"
      }
    ]
  }
]

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2022-32656