Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-48192 State: PUBLISHED Published: 2023-11-06T00:00:00 Last Updated: 2024-09-05T14:18:12.188Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script (JavaScript, VBScript) in the context of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-11.html - https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-11.json
CVE ID: CVE-2022-48193 State: PUBLISHED Published: 2023-11-06T00:00:00 Last Updated: 2024-10-28T18:37:39.311Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-11.html - https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-11.json
CVE ID: CVE-2022-48194 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T18:48:52.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/otsmr/internet-of-vulnerable-things/tree/main/exploits - http://packetstormsecurity.com/files/171623/TP-Link-TL-WR902AC-Remote-Code-Execution.html
CVE ID: CVE-2022-48195 State: PUBLISHED Published: 2022-12-31T00:00:00.000Z Last Updated: 2025-04-11T14:46:45.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated (instead, the nonce is empty). This causes authentication to fail in the best case, but (if paired with a remote end that does not validate the length of the nonce) could lead to insufficient randomness being used during authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
ing used during authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mellium.im/cve/cve-2022-48195/
CVE ID: CVE-2022-48196 State: PUBLISHED Published: 2022-12-30T00:00:00.000Z Last Updated: 2025-04-10T18:42:19.707Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R6700v3 before 1.0.4.122, R6900P before 1.3.3.152, R7000P before 1.3.3.152, R7000 before 1.0.11.136, R7960P before 1.4.4.94, and R8000P before 1.4.4.94. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bleepingcomputer.com/news
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bleepingcomputer.com/news/security/netgear-warns-users-to-patch-recently-fixed-wifi-router-bug/ - https://kb.netgear.com/000065495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2019-0208
CVE ID: CVE-2022-48197 State: PUBLISHED Published: 2023-01-02T00:00:00 Last Updated: 2024-10-28T20:03:14.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ryan412/CVE-2022-48197/blob/main/README.md - https://github.com/yui/yui2/tags - http://packetstormsecurity.com/files/171633/Yahoo-User-
2-48197/blob/main/README.md - https://github.com/yui/yui2/tags - http://packetstormsecurity.com/files/171633/Yahoo-User-Interface-TreeView-2.8.2-Cross-Site-Scripting.html - https://literatejava.com/security/is-it-really-a-cve-reported-xss-in-yui-2-8-2/ - https://github.com/yui/yui2/blob/yui2-2.8.2-8/sandbox/treeview/inc-rightbar.php - https://github.com/ryan412/CVE-2022-48197
CVE ID: CVE-2022-48198 State: PUBLISHED Published: 2023-01-01T00:00:00.000Z Last Updated: 2025-04-11T13:45:47.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vooon/ntpd_driver/issues/9 - https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0 - https://github.
s://github.com/vooon/ntpd_driver/issues/9 - https://github.com/vooon/ntpd_driver/compare/1.2.0...1.3.0 - https://github.com/vooon/ntpd_driver/compare/2.1.0...2.2.0
CVE ID: CVE-2022-48199 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:17:04.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that abuses the Notifications function. The Notifications function allows for arbitrary binary execution and can be modified by any user. The resulting binary execution will occur in the context of any user running NetWorx. If an attacker modifies the Notifications function to execute a malicious binary, the binary will be executed by every user running NetWorx on that
Notifications function to execute a malicious binary, the binary will be executed by every user running NetWorx on that system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.softperfect.com/products/changelog.php?product_id=2 - https://giuliamelottigaribaldi.com/cve-2022-48199/
CVE ID: CVE-2022-48216 State: PUBLISHED Published: 2023-01-04T00:00:00.000Z Last Updated: 2025-04-10T14:05:20.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Uniswap/universal-router/commit/d82c6685ef566d9b280651c99f4b93a8454c08a8 - https://media.dedaub.com/uniswap-bug-bounty-1625d8ff04ae - https://github.com/Uniswap/universal-router/compare/v1.0.1...v1.1.0 - https://twitter.com/dedaub/status/1610058814094450694 - https://github.com/Uniswap/universal-router/pull/189
CVE ID: CVE-2022-48217 State: PUBLISHED Published: 2023-01-04T00:00:00 Last Updated: 2024-08-03T15:10:59.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled old_tf_topic_name and/or new_tf_topic_name parameter. NOTE: the vendor's position is "it is the responsibility of the programmer to make sure that only known and required parameters are set and unexpected parameters are not." Additional Analyst Notes: - CISA ADP Vulnr
nly known and required parameters are set and unexpected parameters are not." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tradr-project/tf_remapper_cpp/issues/1
CVE ID: CVE-2022-48219 State: PUBLISHED Published: 2024-02-14T22:20:04.007Z Last Updated: 2025-03-19T14:17:32.799Z Vendors: HP Inc. Products: Certain HP Desktop PC products Description: Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_10170895-10170920-16/hpsbhf03907
CVE ID: CVE-2022-48220 State: PUBLISHED Published: 2024-02-14T22:21:08.979Z Last Updated: 2025-03-27T14:33:44.929Z Vendors: HP Inc. Products: Certain HP Desktop PC products Description: Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_10170895-10170920-16/hpsbhf03907
CVE ID: CVE-2022-48221 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:01:39.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a race condition and OpLock manipulation, these files can be overwritten by a standard user. They then get executed by the elevated installer. This gives a standard user full SYSTEM code execution (elevation of privileges). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48
am Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48221.pdf
CVE ID: CVE-2022-48222 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:02:25.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the Acuant installer to install certificates. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuan
of privileges). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48222.pdf
CVE ID: CVE-2022-48223 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:11:28.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe is called by the Acuant installer to repair certificates. This call is vulnerable to DLL hijacking due to a race condition and insecure permissions on the executing directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48223.pdf
CVE ID: CVE-2022-48224 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:11:55.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure permissions (full write access within Program Files). Standard users can replace files within this directory that get executed with elevated privileges, leading to a complete arbitrary code execution (elevation of privileges). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48224.pdf
CVE ID: CVE-2022-48225 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:12:26.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers from several different vendors. The Gemalto Document Reader child installation process is vulnerable to DLL hijacking, because it attempts to execute (with elevated privileges) multiple non-existent DLLs out of a non-existent standard-user writable location. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48225.pdf
CVE ID: CVE-2022-48226 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:38:17.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standard user can create the path file ahead of time and obtain elevated code execution. Permissions need to be modified to prevent manipulation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48226.pdf
CVE ID: CVE-2022-48227 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:36:53.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the installation of AssureID, Identify x64, and Identify x86, aka CORE-7361. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48227.pdf
CVE ID: CVE-2022-48228 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T16:35:53.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer log files, aka CORE-7362. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://acuant.com - https://hackandpwn.com/disclosures/CVE-2022-48228.pdf
CVE ID: CVE-2022-48230 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:55:11.660Z Vendors: n/a Products: BiSheng-WNM Problem Types: Misinterpretation of Input Description: There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-moiiahpp-a2a7a816-en
CVE ID: CVE-2022-48231 State: PUBLISHED Published: 2023-05-09T01:20:40.587Z Last Updated: 2025-01-28T21:14:59.349Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48232 State: PUBLISHED Published: 2023-05-09T01:20:26.828Z Last Updated: 2025-01-28T21:27:17.058Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48233 State: PUBLISHED Published: 2023-05-09T01:20:27.914Z Last Updated: 2025-01-28T21:25:15.999Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48234 State: PUBLISHED Published: 2023-05-09T01:20:29.112Z Last Updated: 2025-01-28T21:04:06.915Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In FM service , there is a possible missing params check. This could lead to local denial of service in FM service . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48235 State: PUBLISHED Published: 2023-05-09T01:20:50.506Z Last Updated: 2025-01-28T20:37:21.716Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48236 State: PUBLISHED Published: 2023-05-09T01:20:51.579Z Last Updated: 2025-01-28T20:36:36.083Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48237 State: PUBLISHED Published: 2023-05-09T01:20:52.940Z Last Updated: 2025-01-28T20:34:52.071Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48238 State: PUBLISHED Published: 2023-05-09T01:20:54.059Z Last Updated: 2025-01-28T20:33:46.051Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48239 State: PUBLISHED Published: 2023-05-09T01:20:55.185Z Last Updated: 2025-01-29T16:56:56.083Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48240 State: PUBLISHED Published: 2023-05-09T01:20:56.391Z Last Updated: 2025-01-28T18:16:59.569Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48241 State: PUBLISHED Published: 2023-05-09T01:20:57.479Z Last Updated: 2025-01-28T18:10:48.612Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48242 State: PUBLISHED Published: 2023-05-09T01:20:58.646Z Last Updated: 2025-01-28T18:09:56.631Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48243 State: PUBLISHED Published: 2023-05-09T01:20:59.864Z Last Updated: 2025-01-28T20:32:36.497Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48244 State: PUBLISHED Published: 2023-05-09T01:21:01.122Z Last Updated: 2025-01-28T20:25:22.895Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761
CVE ID: CVE-2022-48245 State: PUBLISHED Published: 2023-05-09T01:21:02.060Z Last Updated: 2025-01-28T20:10:21.219Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1654776866982133761