← Database

CVE-2022-20085

MEDIUM CVSS: 6.7 Published: 2022-05-03 Modified: 2026-06-17

Description

In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06308877; Issue ID: ALPS06308877.

Affected Platforms

Mediatek Mt8365Mediatek Mt8167SMediatek Mt8185Mediatek Mt6763Mediatek Mt6779Mediatek Mt8362AMediatek Mt6753Mediatek Mt8768Mediatek Mt8786Mediatek Mt6893

Weakness Type

CWE-59

References