CVE-2022-32665

2023-01-0300:00:00

MediaTek

www.cve.org

boa

command injection

input validation

privilege escalation

remote exploitation

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

JSON

In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124.

CNA Affected

[
  {
    "vendor": "MediaTek, Inc.",
    "product": "EN7528, EN7580",
    "versions": [
      {
        "version": "Linux SDK versions less than TLB7.3.258.100-P1-1555",
        "status": "affected"
      }
    ]
  }
]

References

corp.mediatek.com/product-security-bulletin/January-2023