6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705066; Issue ID: GN20220705066.
Vendor | Product | Version | CPE |
---|---|---|---|
mediatek | iot_yocto | * | cpe:2.3:a:mediatek:iot_yocto:*:*:*:*:*:*:*:* |
mediatek | iot_yocto | * | cpe:2.3:a:mediatek:iot_yocto:*:*:*:*:*:*:*:* |
mediatek | mt7603 | * | cpe:2.3:h:mediatek:mt7603:*:*:*:*:*:*:*:* |
mediatek | mt7613 | * | cpe:2.3:h:mediatek:mt7613:*:*:*:*:*:*:*:* |
mediatek | mt7615 | * | cpe:2.3:h:mediatek:mt7615:*:*:*:*:*:*:*:* |
mediatek | mt7622 | * | cpe:2.3:h:mediatek:mt7622:*:*:*:*:*:*:*:* |
mediatek | mt7628 | * | cpe:2.3:h:mediatek:mt7628:*:*:*:*:*:*:*:* |
mediatek | mt7629 | * | cpe:2.3:h:mediatek:mt7629:*:*:*:*:*:*:*:* |
mediatek | mt7915 | * | cpe:2.3:h:mediatek:mt7915:*:*:*:*:*:*:*:* |
mediatek | mt7916 | * | cpe:2.3:h:mediatek:mt7916:*:*:*:*:*:*:*:* |
[
{
"vendor": "MediaTek, Inc.",
"product": "MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, MT8518S, MT8532",
"versions": [
{
"version": "7.6.6.0, and Yocto 3.1, 3.3",
"status": "affected"
}
]
}
]