CVE-2022-32665 — MediaTek, Inc. / EN7528, EN7580

Description (CNA)

In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124.

Affected (CNA)

Vendor / product	Versions
MediaTek, Inc. / EN7528, EN7580	affected Linux SDK versions less than TLB7.3.258.100-P1-1555

CWE

No CWE identifiers supplied.

References

https://corp.mediatek.com/product-security-bulletin/January-2023

ADP enrichment

CVE

No English description supplied.

https://corp.mediatek.com/product-security-bulletin/January-2023

CISA-ADP

No English description supplied.

No references supplied.