Vulnerability-Lookup

BDU:2024-01232 (CVE-2022-20072)

Vulnerability from fstec – Published: 2024-02-14 – Updated: 2024-02-14 – View on bdu.fstec.ru Fixed

Title

Уязвимость программного обеспечения продуктов Lenovo, связанная с небезопасным управлением привилегиями, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость программного обеспечения планшетных Lenovo связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

7.8 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-269 - Небезопасное управление привилегиями

Aliases

CVE-2022-20072, LEN-142135

References

2 references

URL
https://support.lenovo.com/us/en/product_security/LEN-142135
https://corp.mediatek.com/product-security-bulletin/April-2022

Impacted products

70 products from 2 vendors

Vendors

MediaTek Inc., Lenovo Group Limited

Products

MT6580, MT6735, MT6737, MT6739, MT6753, MT6755, MT6755S, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8788, MT8791, MT8797, MT6769, MT6880, MT6890, MT6789, MT6875, Lenovo Motorola Moto Tab G62, Lenovo Tab P11 Pro (2nd Gen) (TB132FU), Lenovo Tab M10 Plus 3rd Gen TB125FU, Lenovo Tab M10 Plus 3rd Gen TB128FU, Lenovo Tab M10 Plus 3rd Gen TB128XU, MT6795, MT6879, MT6891, MT6895, MT8675, Lenovo Tab Extreme TB570FU, Lenovo Tab Extreme TB570ZU, Lenovo Tab M8 (4th Gen) TB300XU, Lenovo Tab M8 (4th Gen) TB300FU, Lenovo Tab M8 HD (2nd Gen): TB-8505F, Lenovo Tab M9 TB310XU, Lenovo Tab M9 TB310FU, Lenovo Tab P11 (2nd Gen) TB350XU, Lenovo Tab P11 Pro (2nd Gen) TB132FU, Lenovo Tab P12: TB370FU, Lenovo Tab M7 (3rd Gen): TB-7306F, Lenovo Tab M8 (3rd Gen): TB-8506F, Lenovo Yoga Tab 11 YT-J706X, Lenovo Yoga Tab 11 YT-J706F

Versions

- (MT6580), - (MT6735), - (MT6737), - (MT6739), - (MT6753), - (MT6755), - (MT6755S), - (MT6761), - (MT6765), - (MT6768), - (MT6771), - (MT6779), - (MT6781), - (MT6785), - (MT6797), - (MT6833), - (MT6853), - (MT6853T), - (MT6873), - (MT6877), - (MT6883), - (MT6885), - (MT6889), - (MT6893), - (MT8167S), - (MT8168), - (MT8173), - (MT8175), - (MT8176), - (MT8183), - (MT8185), - (MT8321), - (MT8362A), - (MT8365), - (MT8385), - (MT8765), - (MT8766), - (MT8768), - (MT8788), - (MT8791), - (MT8797), - (MT6769), - (MT6880), - (MT6890), - (MT6789), - (MT6875), до TB125FU_USR_S100116_2311171525_MP1RC_ROW (Lenovo Motorola Moto Tab G62), до TB132FU_S240219_231123_ROW (Lenovo Tab P11 Pro (2nd Gen) (TB132FU)), до TB125FU_USR_S100116_2311171525_MP1RC_ROW (Lenovo Tab M10 Plus 3rd Gen TB125FU), до TB125FU_USR_S100116_2311171525_MP1RC_ROW (Lenovo Tab M10 Plus 3rd Gen TB128FU), до TB125FU_USR_S100116_2311171525_MP1RC_ROW (Lenovo Tab M10 Plus 3rd Gen TB128XU), - (MT6795), - (MT6879), - (MT6891), - (MT6895), - (MT8675), до 15.0.795 (Lenovo Tab Extreme TB570FU), до 15.0.795 (Lenovo Tab Extreme TB570ZU), до TB300FU_USR_S100043_230909_MP1V1111_ROW (Lenovo Tab M8 (4th Gen) TB300XU), до TB300FU_USR_S100043_230909_MP1V1111_ROW (Lenovo Tab M8 (4th Gen) TB300FU), до 8505F_USR_S301106_2309140042_V9.56_BMP_ROW (Lenovo Tab M8 HD (2nd Gen): TB-8505F), до 8505FS_USR_S301107_2309140028_V9.56_BMP_ROW (Lenovo Tab M8 HD (2nd Gen): TB-8505F), до 8505X_USR_S301129_2309141226_V9.56_BMP_ROW (Lenovo Tab M8 HD (2nd Gen): TB-8505F), до 8505XS_USR_S301077_2309140036_V9.56_BMP_ROW (Lenovo Tab M8 HD (2nd Gen): TB-8505F), до TB310XU_S000864_231031_ROW¼›TB310FU_S000864_231031_ROW (Lenovo Tab M9 TB310XU), до TB310XU_S000864_231031_ROW¼›TB310FU_S000864_231031_ROW (Lenovo Tab M9 TB310FU), до TB350XU_USER_S130248_2310100030_MP1V14_ROW (Lenovo Tab P11 (2nd Gen) TB350XU), до TB132FU_S240219_231123_ROW (Lenovo Tab P11 Pro (2nd Gen) TB132FU), до 15.0.229 (Lenovo Tab P12: TB370FU), до TB-7306F_S000059_240109_ROW (Lenovo Tab M7 (3rd Gen): TB-7306F), до TB-8506F_S000041_231212_ROW (Lenovo Tab M8 (3rd Gen): TB-8506F), до YT-J706X_USR_S240184_2311141837_MPS0_ROW (Lenovo Yoga Tab 11 YT-J706X), до YT-J706F_USR_S240184_2311141836_MPS0_ROW (Lenovo Yoga Tab 11 YT-J706X), до YT-J706F_USR_S240184_2311141836_MPS0_ROW (Lenovo Yoga Tab 11 YT-J706F), до YT-J706X_USR_S240184_2311141837_MPS0_ROW (Lenovo Yoga Tab 11 YT-J706F)

Product types

Firmware, Appliance software

Platforms

Google Inc Android 11.0, Google Inc Android 12.0

Mitigations

Использование рекомендаций производителя: Для продуктов Lenovo: https://support.lenovo.com/us/en/product_security/LEN-142135 Для MediaTek: https://corp.mediatek.com/product-security-bulletin/April-2022

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "MediaTek Inc., Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (MT6580), - (MT6735), - (MT6737), - (MT6739), - (MT6753), - (MT6755), - (MT6755S), - (MT6761), - (MT6765), - (MT6768), - (MT6771), - (MT6779), - (MT6781), - (MT6785), - (MT6797), - (MT6833), - (MT6853), - (MT6853T), - (MT6873), - (MT6877), - (MT6883), - (MT6885), - (MT6889), - (MT6893), - (MT8167S), - (MT8168), - (MT8173), - (MT8175), - (MT8176), - (MT8183), - (MT8185), - (MT8321), - (MT8362A), - (MT8365), - (MT8385), - (MT8765), - (MT8766), - (MT8768), - (MT8788), - (MT8791), - (MT8797), - (MT6769), - (MT6880), - (MT6890), - (MT6789), - (MT6875), \u0434\u043e TB125FU_USR_S100116_2311171525_MP1RC_ROW (Lenovo Motorola Moto Tab G62), \u0434\u043e TB132FU_S240219_231123_ROW (Lenovo Tab P11 Pro (2nd Gen) (TB132FU)), \u0434\u043e TB125FU_USR_S100116_2311171525_MP1RC_ROW (Lenovo Tab M10 Plus 3rd Gen TB125FU), \u0434\u043e TB125FU_USR_S100116_2311171525_MP1RC_ROW (Lenovo Tab M10 Plus 3rd Gen TB128FU), \u0434\u043e TB125FU_USR_S100116_2311171525_MP1RC_ROW (Lenovo Tab M10 Plus 3rd Gen TB128XU), - (MT6795), - (MT6879), - (MT6891), - (MT6895), - (MT8675), \u0434\u043e 15.0.795 (Lenovo Tab Extreme TB570FU), \u0434\u043e 15.0.795 (Lenovo Tab Extreme TB570ZU), \u0434\u043e TB300FU_USR_S100043_230909_MP1V1111_ROW (Lenovo Tab M8 (4th Gen) TB300XU), \u0434\u043e TB300FU_USR_S100043_230909_MP1V1111_ROW (Lenovo Tab M8 (4th Gen) TB300FU), \u0434\u043e 8505F_USR_S301106_2309140042_V9.56_BMP_ROW (Lenovo Tab M8 HD (2nd Gen): TB-8505F), \u0434\u043e 8505FS_USR_S301107_2309140028_V9.56_BMP_ROW (Lenovo Tab M8 HD (2nd Gen): TB-8505F), \u0434\u043e 8505X_USR_S301129_2309141226_V9.56_BMP_ROW (Lenovo Tab M8 HD (2nd Gen): TB-8505F), \u0434\u043e 8505XS_USR_S301077_2309140036_V9.56_BMP_ROW (Lenovo Tab M8 HD (2nd Gen): TB-8505F), \u0434\u043e TB310XU_S000864_231031_ROW\u00bc\u203aTB310FU_S000864_231031_ROW (Lenovo Tab M9 TB310XU), \u0434\u043e TB310XU_S000864_231031_ROW\u00bc\u203aTB310FU_S000864_231031_ROW (Lenovo Tab M9 TB310FU), \u0434\u043e TB350XU_USER_S130248_2310100030_MP1V14_ROW (Lenovo Tab P11 (2nd Gen) TB350XU), \u0434\u043e TB132FU_S240219_231123_ROW (Lenovo Tab P11 Pro (2nd Gen) TB132FU), \u0434\u043e 15.0.229 (Lenovo Tab P12: TB370FU), \u0434\u043e TB-7306F_S000059_240109_ROW (Lenovo Tab M7 (3rd Gen): TB-7306F), \u0434\u043e TB-8506F_S000041_231212_ROW (Lenovo Tab M8 (3rd Gen): TB-8506F), \u0434\u043e YT-J706X_USR_S240184_2311141837_MPS0_ROW (Lenovo Yoga Tab 11 YT-J706X), \u0434\u043e YT-J706F_USR_S240184_2311141836_MPS0_ROW (Lenovo Yoga Tab 11 YT-J706X), \u0434\u043e YT-J706F_USR_S240184_2311141836_MPS0_ROW (Lenovo Yoga Tab 11 YT-J706F), \u0434\u043e YT-J706X_USR_S240184_2311141837_MPS0_ROW (Lenovo Yoga Tab 11 YT-J706F)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-142135\n\n\u0414\u043b\u044f MediaTek:\nhttps://corp.mediatek.com/product-security-bulletin/April-2022",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.01.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "14.02.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "14.02.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-01232",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-20072, LEN-142135",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "MT6580, MT6735, MT6737, MT6739, MT6753, MT6755, MT6755S, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6797, MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8167S, MT8168, MT8173, MT8175, MT8176, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8765, MT8766, MT8768, MT8788, MT8791, MT8797, MT6769, MT6880, MT6890, MT6789, MT6875, Lenovo Motorola Moto Tab G62, Lenovo Tab P11 Pro (2nd Gen) (TB132FU), Lenovo Tab M10 Plus 3rd Gen TB125FU, Lenovo Tab M10 Plus 3rd Gen TB128FU, Lenovo Tab M10 Plus 3rd Gen TB128XU, MT6795, MT6879, MT6891, MT6895, MT8675, Lenovo Tab Extreme TB570FU, Lenovo Tab Extreme TB570ZU, Lenovo Tab M8 (4th Gen) TB300XU, Lenovo Tab M8 (4th Gen) TB300FU, Lenovo Tab M8 HD (2nd Gen): TB-8505F, Lenovo Tab M9 TB310XU, Lenovo Tab M9 TB310FU, Lenovo Tab P11 (2nd Gen) TB350XU, Lenovo Tab P11 Pro (2nd Gen) TB132FU, Lenovo Tab P12: TB370FU, Lenovo Tab M7 (3rd Gen): TB-7306F, Lenovo Tab M8 (3rd Gen): TB-8506F, Lenovo Yoga Tab 11 YT-J706X, Lenovo Yoga Tab 11 YT-J706F",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Google Inc Android 11.0 , Google Inc Android 12.0 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Lenovo, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (CWE-269)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u043d\u0448\u0435\u0442\u043d\u044b\u0445 Lenovo \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-142135\nhttps://corp.mediatek.com/product-security-bulletin/April-2022",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-269",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2022-20072 (GCVE-0-2022-20072)

Vulnerability from cvelistv5 – Published: 2022-04-11 19:38 – Updated: 2024-08-03 02:02

Summary

In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06219118; Issue ID: ALPS06219118.

Severity

No CVSS data available.

CWE

Elevation of Privilege

Assigner

MediaTek mitre root Scorecard

References

1 reference

URL	Tags
https://corp.mediatek.com/product-security-bullet…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
MediaTek, Inc.	MT6580, MT6735, MT6737, MT6739, MT6753, MT6755, MT6755S, MT6761, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8791, MT8797	Affected: Android 11.0, 12.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:02:30.517Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://corp.mediatek.com/product-security-bulletin/April-2022"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MT6580, MT6735, MT6737, MT6739, MT6753, MT6755, MT6755S, MT6761, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8791, MT8797",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "Android 11.0, 12.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06219118; Issue ID: ALPS06219118."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-11T19:38:04.000Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://corp.mediatek.com/product-security-bulletin/April-2022"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mediatek.com",
          "ID": "CVE-2022-20072",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MT6580, MT6735, MT6737, MT6739, MT6753, MT6755, MT6755S, MT6761, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6795, MT6797, MT6799, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT6985, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8183, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8791, MT8797",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Android 11.0, 12.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "MediaTek, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS06219118; Issue ID: ALPS06219118."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Elevation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://corp.mediatek.com/product-security-bulletin/April-2022",
              "refsource": "MISC",
              "url": "https://corp.mediatek.com/product-security-bulletin/April-2022"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2022-20072",
    "datePublished": "2022-04-11T19:38:04.000Z",
    "dateReserved": "2021-10-12T00:00:00.000Z",
    "dateUpdated": "2024-08-03T02:02:30.517Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2024-01232 (CVE-2022-20072)

CVE-2022-20072 (GCVE-0-2022-20072)

Tags

Sightings

Nomenclature

Related by attack behaviour