ByteOS Network

NVD Vulnerability Details :

CVE-2022-32664

Modified

Source-security@mediatek.com

Published At-03 Jan, 2023 | 21:15

Updated At-10 Apr, 2025 | 16:15

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Patch ID: A20220004; Issue ID: OSBNB00140929.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

MediaTek Inc.

>>linkit_software_development_kit>>Versions before 7.3.293.0(exclusive)

cpe:2.3:a:mediatek:linkit_software_development_kit:*:*:*:*:*:*:*:*

MediaTek Inc.

>>en7516>>-

cpe:2.3:h:mediatek:en7516:-:*:*:*:*:*:*:*

MediaTek Inc.

>>linkit_software_development_kit>>Versions before 7.3.293.0(exclusive)

cpe:2.3:a:mediatek:linkit_software_development_kit:*:*:*:*:*:*:*:*

MediaTek Inc.

>>en7528>>-

cpe:2.3:h:mediatek:en7528:-:*:*:*:*:*:*:*

MediaTek Inc.

>>linkit_software_development_kit>>Versions before 7.3.293.0(exclusive)

cpe:2.3:a:mediatek:linkit_software_development_kit:*:*:*:*:*:*:*:*

MediaTek Inc.

>>en7529>>-

cpe:2.3:h:mediatek:en7529:-:*:*:*:*:*:*:*

MediaTek Inc.

>>linkit_software_development_kit>>Versions before 7.3.293.0(exclusive)

cpe:2.3:a:mediatek:linkit_software_development_kit:*:*:*:*:*:*:*:*

MediaTek Inc.

>>en7561>>-

cpe:2.3:h:mediatek:en7561:-:*:*:*:*:*:*:*

MediaTek Inc.

>>linkit_software_development_kit>>Versions before 7.3.293.0(exclusive)

cpe:2.3:a:mediatek:linkit_software_development_kit:*:*:*:*:*:*:*:*

MediaTek Inc.

>>en7562>>-

cpe:2.3:h:mediatek:en7562:-:*:*:*:*:*:*:*

MediaTek Inc.

>>linkit_software_development_kit>>Versions before 7.3.293.0(exclusive)

cpe:2.3:a:mediatek:linkit_software_development_kit:*:*:*:*:*:*:*:*

MediaTek Inc.

>>en7580>>-

cpe:2.3:h:mediatek:en7580:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-77	Primary	nvd@nist.gov
CWE-77	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://corp.mediatek.com/product-security-bulletin/January-2023	security@mediatek.com	Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/January-2023	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History