Description
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Unisoc (Shanghai) Technologies | SL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152 | Mocor5/Andorid8.1/Andorid9 | — |