Lucene search

[email protected]NVD:CVE-2022-32657

HistoryJan 03, 2023 - 9:15 p.m.

CVE-2022-32657

2023-01-0321:15:12

CWE-755

[email protected]

web.nvd.nist.gov

wi-fi driver

local escalation

privilege

system execution

patch id

issue id

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042.

Affected configurations

NVD

Node

mediatekmt7603_firmwareMatch7.6.6.0

AND

mediatekmt7603Match-

Node

mediatekmt7613_firmwareMatch7.6.6.0

AND

mediatekmt7613Match-

Node

mediatekmt7615_firmwareMatch7.6.6.0

AND

mediatekmt7615Match-

Node

mediatekmt7622_firmwareMatch7.6.6.0

AND

mediatekmt7622Match-

Node

mediatekmt7628_firmwareMatch7.6.6.0

AND

mediatekmt7628Match-

Node

mediatekmt7629_firmwareMatch7.6.6.0

AND

mediatekmt7629Match-

Node

mediatekmt7915_firmwareMatch7.6.6.0

AND

mediatekmt7915Match-

Node

mediatekmt7916_firmwareMatch7.6.6.0

AND

mediatekmt7916Match-

Node

mediatekmt7981_firmwareMatch7.6.6.0

AND

mediatekmt7981Match-

Node

mediatekmt7986_firmwareMatch7.6.6.0

AND

mediatekmt7986Match-

References

corp.mediatek.com/product-security-bulletin/January-2023

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2022-32657

cvelist1 cve1 prion1 kitploit1