Privilege Escalation Vulnerability in MediaTek Wi-Fi Driver
CVE-2022-32659

6.7MEDIUM

Key Information:

Vendor
MediaTek
Status
Mt7603, Mt7613, Mt7615, Mt7622, Mt7628, Mt7629, Mt7915, Mt7916, Mt7981, Mt7986, Mt8518s, Mt8532
Vendor
CVE Published:
3 January 2023

Summary

A vulnerability exists in MediaTek's Wi-Fi driver that may lead to undefined behavior due to improper error handling. This flaw can allow an attacker to escalate local privileges, enabling them to execute system-level commands without needing user interaction. Affected systems should apply the provided patch (GN20220705066) to mitigate this issue and secure their environment.

Affected Version(s)

MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, MT8518S, MT8532 7.6.6.0, and Yocto 3.1, 3.3

References

https://corp.mediatek.com/product-security-bulletin/Janua...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.