Command Injection Vulnerability in Mediatek Config Manager

CVE-2021-31574

What is CVE-2021-31574?

In Mediatek's Config Manager, a flaw exists that allows for command injection due to insufficient input validation. This vulnerability enables a proximal attacker to escalate privileges without needing any prior execution permissions. Notably, user interaction is not required for the exploitation of this issue, posing significant risks to systems using affected versions. Mediatek has issued a patch (A20210009) to mitigate this vulnerability, emphasizing the importance of timely updates to maintain security.

References