Description

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038.

Related CPE's

o

google

android

2

h

mediatek

mt6762

-

h

mediatek

mt6765

-

h

mediatek

mt6768

-

h

mediatek

mt6769

-

h

mediatek

mt6779

-

h

mediatek

mt6781

-

h

mediatek

mt6785

-

h

mediatek

mt6795

-

h

mediatek

mt6797

-

h

mediatek

mt6799

-

h

mediatek

mt6833

-

h

mediatek

mt6853

-

h

mediatek

mt6853t

-

h

mediatek

mt6873

-

h

mediatek

mt6875

-

h

mediatek

mt6877

-

h

mediatek

mt6880

-

h

mediatek

mt6883

-

h

mediatek

mt6885

-

h

mediatek

mt6889

-

h

mediatek

mt6891

-

h

mediatek

mt6893

-

h

mediatek

mt8163

-

h

mediatek

mt8167

-

h

mediatek

mt8167s

-

h

mediatek

mt8168

-

h

mediatek

mt8173

-

h

mediatek

mt8175

-

h

mediatek

mt8183

-

h

mediatek

mt8185

-

h

mediatek

mt8321

-

h

mediatek

mt8362a

-

h

mediatek

mt8365

-

h

mediatek

mt8385

-

h

mediatek

mt8666

-

h

mediatek

mt8667

-

h

mediatek

mt8675

-

h

mediatek

mt8696

-

h

mediatek

mt8735a

-

h

mediatek

mt8735b

-

h

mediatek

mt8765

-

h

mediatek

mt8766

-

h

mediatek

mt8768

-

h

mediatek

mt8786

-

h

mediatek

mt8788

-

h

mediatek

mt8789

-

h

mediatek

mt8791

-

h

mediatek

mt8797

-

References

https://corp.mediatek.com/product-security-bulletin/March-2022

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-59

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-03-10T17:45:03.597

3 years ago

Last modified

2022-03-17T17:55:40.877

3 years ago