Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-31575 EUVD-2021-18469GHSA-jr6c-jc92-gv6c

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privileg…

Published Feb 6, 2023 · Updated Mar 26, 2025 · Assigned by MediaTek

Description

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.

Affected products

VendorProductAffectedFixed
MediaTek EN7528, EN7580 Linux SDK versions less than TLM7.3.275.0-82 —

References