Design/Logic Flaw

2023-01-0321:15:00

PRIOn knowledge base

www.prio-n.com

wi-fi

driver

flaw

local privilege escalation

system execution

exploitation

patch id

issue id

nvd

0.0004 Low

EPSS

Percentile

5.1%

JSON

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705042; Issue ID: GN20220705042.

CPENameOperatorVersion
mt7603_firmwareeq7.6.6.0
mt7613_firmwareeq7.6.6.0
mt7615_firmwareeq7.6.6.0
mt7622_firmwareeq7.6.6.0
mt7628_firmwareeq7.6.6.0
mt7629_firmwareeq7.6.6.0
mt7915_firmwareeq7.6.6.0
mt7916_firmwareeq7.6.6.0
mt7981_firmwareeq7.6.6.0
mt7986_firmwareeq7.6.6.0

Name	Operator	Version
mt7603_firmware	eq	7.6.6.0
mt7613_firmware	eq	7.6.6.0
mt7615_firmware	eq	7.6.6.0
mt7622_firmware	eq	7.6.6.0
mt7628_firmware	eq	7.6.6.0
mt7629_firmware	eq	7.6.6.0
mt7915_firmware	eq	7.6.6.0
mt7916_firmware	eq	7.6.6.0
mt7981_firmware	eq	7.6.6.0
mt7986_firmware	eq	7.6.6.0

References

corp.mediatek.com/product-security-bulletin/January-2023

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for PRION:CVE-2022-32657