Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-31575

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
MediaTek

Description

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MediaTek, Inc. EN7528, EN7580

  • Linux SDK versions less than TLM7.3.275.0-82affected

References