Lucene search

K

[email protected]CVE-2022-32664

HistoryJan 03, 2023 - 9:15 p.m.

CVE-2022-32664

2023-01-0321:15:12

CWE-77

[email protected]

web.nvd.nist.gov

18

cve-2022-32664

config manager

command injection

input validation

remote escalation

privilege escalation

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Patch ID: A20220004; Issue ID: OSBNB00140929.

Affected configurations

NVD

Node

mediateklinkit_software_development_kitRange<7.3.293.0

AND

mediateken7516Match-

Node

mediateklinkit_software_development_kitRange<7.3.293.0

AND

mediateken7528Match-

Node

mediateklinkit_software_development_kitRange<7.3.293.0

AND

mediateken7529Match-

Node

mediateklinkit_software_development_kitRange<7.3.293.0

AND

mediateken7561Match-

Node

mediateklinkit_software_development_kitRange<7.3.293.0

AND

mediateken7562Match-

Node

mediateklinkit_software_development_kitRange<7.3.293.0

AND

mediateken7580Match-

CPENameOperatorVersion
mediatek:linkit_software_development_kitmediatek linkit software development kitlt7.3.293.0

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "EN7516, EN7528, EN7529, EN7561, EN7562, EN7580",
    "versions": [
      {
        "version": "Linux SDK versions less than TLM-7.3.293.0",
        "status": "affected"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/January-2023

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

Related for CVE-2022-32664

nvd1 prion1 cvelist1