Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-32664

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User execution privileges needed.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
MediaTek

Description

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Patch ID: A20220004; Issue ID: OSBNB00140929.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MediaTek, Inc. EN7516, EN7528, EN7529, EN7561, EN7562, EN7580

  • Linux SDK versions less than TLM-7.3.293.0affected

References