6.5
Medium
CVE-2024-39438 In linkturbonative service, there is a possible command injection due to improper input validation
Description
In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 | Versions not published | |
| sc7731e | Versions not published | |
| sc9832e | Versions not published | |
| sc9863a | Versions not published | |
| t310 | Versions not published | |
| t606 | Versions not published | |
| t612 | Versions not published | |
| t616 | Versions not published | |
| t610 | Versions not published |
Other CVEs of SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
The 163 CVEs of SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 →
CVE-2024-39437
In linkturbonative service, there is a possible command injection due to improper input validation
6.5
Medium
CVE-2024-39436
In linkturbonative service, there is a possible command injection due to improper input validation
6.5
Medium
CVE-2024-39435
In Logmanager service, there is a possible missing verification incorrect input
6.5
Medium
CVE-2024-39432
In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check
8.3
High