CVE-2022-32664

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Patch ID: A20220004; Issue ID: OSBNB00140929.

Score

CVSS 3.1 8.8 High

Status

Modified - security@mediatek.com

Published

2023-01-03

Last modified

2025-04-10

Weaknesses

CWE-77

Affected products

• Linkit Software Development Kit (Mediatek)
• En7516 (Mediatek Inc.)
• En7528 (Mediatek Inc.)
• En7529 (Mediatek Inc.)
• En7561 (Mediatek Inc.)
• En7562 (Mediatek Inc.)
• En7580 (Mediatek Inc.)

References

• https://corp.mediatek.com/product-security-bulletin/January-2023