CVE-2021-31575

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://corp.mediatek.com/product-security-acknowledgements	Vendor Advisory
https://corp.mediatek.com/product-security-acknowledgements	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:mediatek:en7580_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:en7580:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:mediatek:en7528_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mediatek:en7528:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:05

Type	Values Removed	Values Added
Summary		(es) En Config Manager, existe una posible inyección de comando debido a una validación de entrada incorrecta. Esto podría conducir a una escalada remota de privilegios por parte de un atacante próximo sin necesidad de privilegios de ejecución adicionales. La interacción del usuario no es necesaria para la explotación. ID de parche: A20210009; ID del problema: OSBNB00123234.
References	~~() https://corp.mediatek.com/product-security-acknowledgements - Vendor Advisory~~	() https://corp.mediatek.com/product-security-acknowledgements - Vendor Advisory

08 Aug 2023, 14:21

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-02-06 22:15

Updated : 2024-11-21 06:05

NVD link : CVE-2021-31575

Mitre link : CVE-2021-31575

CVE.ORG link : CVE-2021-31575

JSON object : View

Products Affected

mediatek

en7580_firmware
en7580
en7528_firmware
en7528

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2021-31575", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-02-06T22:15:09.320", "references": [{"url": "https://corp.mediatek.com/product-security-acknowledgements", "tags": ["Vendor Advisory"], "source": "security@mediatek.com"}, {"url": "https://corp.mediatek.com/product-security-acknowledgements", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234."}, {"lang": "es", "value": "En Config Manager, existe una posible inyecci\u00f3n de comando debido a una validaci\u00f3n de entrada incorrecta. Esto podr\u00eda conducir a una escalada remota de privilegios por parte de un atacante pr\u00f3ximo sin necesidad de privilegios de ejecuci\u00f3n adicionales. La interacci\u00f3n del usuario no es necesaria para la explotaci\u00f3n. ID de parche: A20210009; ID del problema: OSBNB00123234."}], "lastModified": "2024-11-21T06:05:56.093", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mediatek:en7580_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CA71010-AB02-4144-BEAD-78E3E2083242", "versionEndExcluding": "tlm7.3.275.0-82"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:en7580:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "061DBB68-80AF-4016-AAE0-EE9DFDFB341B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mediatek:en7528_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6E9A131-DCCC-406C-9134-E026D14E5D34", "versionEndExcluding": "tlm7.3.275.0-82"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:en7528:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CD990C82-4C61-479B-A49F-11A3C0812AC5"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@mediatek.com"}