Skip to content
OpenAdvisories
High · 8.8 CVE-2022-32664 EUVD-2022-35730GHSA-rjqv-25x4-8q76

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privileg…

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by MediaTek

Description

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Patch ID: A20220004; Issue ID: OSBNB00140929.

Affected products

VendorProductAffectedFixed
MediaTek EN7516, EN7528, EN7529, EN7561, EN7562, EN7580 Linux SDK versions less than TLM-7.3.293.0 —

References