Skip to content
OpenAdvisories
Unscored CVE-2023-20820 EUVD-2023-24999GHSA-44jc-833q-7hj8

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with Syst…

Published Sep 4, 2023 · Updated Oct 9, 2024 · Assigned by MediaTek

Vendor: MediaTek Product: MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986, MT7990

Description

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.

Affected products

VendorProductAffectedFixed
MediaTek MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986, MT7990 OpenWRT 19.07, 21.02 —

References