Input validation

2024-03-1117:15:00

PRIOn knowledge base

www.prio-n.com

access secure service

input validation

keystroke injection

privilege escalation

remote exploitation

nvd

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.