Mediatek, Inc. En7528, En7580 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Mediatek, Inc. En7528, En7580, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-31577mediatek, inc.en7528, en7580+2
EPSS score1.15%
In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2021-31575mediatek, inc.en7528, en7580+2EPSS score1.68%
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31578mediatek, inc.en7528, en7580+2EPSS score1.28%
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2021-31574mediatek, inc.en7528, en7580+2EPSS score1.68%
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31573mediatek, inc.en7528, en7580+2EPSS score1.68%
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.CVE-2021-31576mediatek, inc.en7528, en7580+2EPSS score1.01%
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID: OSBNB00123241.CVE-2022-32665mediatek, inc.en7528, en7580+1EPSS score1.60%
In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124.