CVE-2023-20820: vulnerability in MediaTek, Inc. MT6890, MT7603, MT7612, MT7613…
Published · Updated
Follow this CVE+ Monitor MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986, MT7990
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.4%
In short
A wireless network service fails to properly check user input before running commands, allowing attackers to inject malicious commands and execute code remotely without needing any interaction from the user.
Technical detail
The wlan service contains an improper input validation vulnerability in command processing that allows unauthenticated remote code injection. Exploitation requires System-level privileges for execution and can be triggered automatically without user interaction.
Summary generated and translated by AI from the official description.
In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.