6.7
Medium
CVE-2022-47339 In cmd services, there is a OS command injection issue due to missing permission check
Description
In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 | Versions not published |
Other CVEs of SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
The 327 CVEs of SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 →
CVE-2022-48451
In bluetooth service, there is a possible out of bounds write due to race condition
Not rated
CVE-2023-33905
In iwnpi server, there is a possible out of bounds write due to a missing bounds check
4.4
Medium
CVE-2023-33904
In hci_server, there is a possible out of bounds read due to a missing bounds check
Not rated
CVE-2022-48450
In bluetooth service, there is a possible missing params check
Not rated