← Database

CVE-2022-20054

HIGH CVSS: 7.8 Published: 2022-03-10 Modified: 2026-06-17

Description

In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219083; Issue ID: ALPS06219083.

Affected Platforms

Mediatek Mt8365Mediatek Mt8185Mediatek Mt6763Mediatek Mt6779Mediatek Mt8362AMediatek Mt8768Mediatek Mt6739Mediatek Mt8786Mediatek Mt8791Mediatek Mt8321

Weakness Type

CWE-862

References