CVE-2022-20021

In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198513; Issue ID: ALPS06198513.

CVSS v3 6.5 MEDIUM
CVSS v2.0 3.3 LOW

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

3.3^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://corp.mediatek.com/product-security-bulletin/January-2022	Vendor Advisory
https://corp.mediatek.com/product-security-bulletin/January-2022	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:google:android:10.0:::::::*
	cpe:2.3:o:google:android:11.0:::::::*

OR	cpe:2.3:h:mediatek:awus036nh:-:::::::*
	cpe:2.3:h:mediatek:mt6580:-:::::::*
	cpe:2.3:h:mediatek:mt6630:-:::::::*
	cpe:2.3:h:mediatek:mt6735:-:::::::*
	cpe:2.3:h:mediatek:mt6737:-:::::::*
	cpe:2.3:h:mediatek:mt6739:-:::::::*
	cpe:2.3:h:mediatek:mt6750s:-:::::::*
	cpe:2.3:h:mediatek:mt6753:-:::::::*
	cpe:2.3:h:mediatek:mt6755s:-:::::::*
	cpe:2.3:h:mediatek:mt6757:-:::::::*
	cpe:2.3:h:mediatek:mt6757c:-:::::::*
	cpe:2.3:h:mediatek:mt6757cd:-:::::::*
	cpe:2.3:h:mediatek:mt6757ch:-:::::::*
	cpe:2.3:h:mediatek:mt6763:-:::::::*
	cpe:2.3:h:mediatek:mt6771:-:::::::*
	cpe:2.3:h:mediatek:mt7662t:-:::::::*
	cpe:2.3:h:mediatek:mt7663:-:::::::*
	cpe:2.3:h:mediatek:mt7668:-:::::::*
	cpe:2.3:h:mediatek:mt8163:-:::::::*
	cpe:2.3:h:mediatek:mt8167:-:::::::*
	cpe:2.3:h:mediatek:mt8167s:-:::::::*
	cpe:2.3:h:mediatek:mt8173:-:::::::*
	cpe:2.3:h:mediatek:mt8183:-:::::::*
	cpe:2.3:h:mediatek:mt8321:-:::::::*
	cpe:2.3:h:mediatek:mt8362a:-:::::::*
	cpe:2.3:h:mediatek:mt8362b:-:::::::*
	cpe:2.3:h:mediatek:mt8385:-:::::::*
	cpe:2.3:h:mediatek:mt8765:-:::::::*
	cpe:2.3:h:mediatek:mt8788:-:::::::*

History

21 Nov 2024, 06:41

Type	Values Removed	Values Added
References	~~() https://corp.mediatek.com/product-security-bulletin/January-2022 - Vendor Advisory~~	() https://corp.mediatek.com/product-security-bulletin/January-2022 - Vendor Advisory

11 Jan 2022, 19:07

Type	Values Removed	Values Added
CPE		cpe:2.3:h:mediatek:awus036nh:-:::::::* cpe:2.3:h:mediatek:mt8362b:-:::::::* cpe:2.3:h:mediatek:mt7662t:-:::::::* cpe:2.3:h:mediatek:mt8167:-:::::::* cpe:2.3:h:mediatek:mt6755s:-:::::::* cpe:2.3:h:mediatek:mt7668:-:::::::* cpe:2.3:h:mediatek:mt6580:-:::::::* cpe:2.3:h:mediatek:mt8385:-:::::::* cpe:2.3:h:mediatek:mt8167s:-:::::::* cpe:2.3:h:mediatek:mt6750s:-:::::::* cpe:2.3:h:mediatek:mt6757c:-:::::::* cpe:2.3:h:mediatek:mt6753:-:::::::* cpe:2.3:h:mediatek:mt8173:-:::::::* cpe:2.3:h:mediatek:mt6739:-:::::::* cpe:2.3:h:mediatek:mt8788:-:::::::* cpe:2.3:h:mediatek:mt8183:-:::::::* cpe:2.3:h:mediatek:mt8163:-:::::::* cpe:2.3:h:mediatek:mt8765:-:::::::* cpe:2.3:h:mediatek:mt6757cd:-:::::::* cpe:2.3:o:google:android:11.0:::::::* cpe:2.3:h:mediatek:mt6763:-:::::::* cpe:2.3:h:mediatek:mt6735:-:::::::* cpe:2.3:h:mediatek:mt6771:-:::::::* cpe:2.3:h:mediatek:mt8362a:-:::::::* cpe:2.3:h:mediatek:mt7663:-:::::::* cpe:2.3:h:mediatek:mt6630:-:::::::* cpe:2.3:h:mediatek:mt6737:-:::::::* cpe:2.3:h:mediatek:mt6757ch:-:::::::* cpe:2.3:o:google:android:10.0:::::::* cpe:2.3:h:mediatek:mt6757:-:::::::* cpe:2.3:h:mediatek:mt8321:-:::::::*
References	~~(MISC) https://corp.mediatek.com/product-security-bulletin/January-2022 -~~	(MISC) https://corp.mediatek.com/product-security-bulletin/January-2022 - Vendor Advisory
CWE		NVD-CWE-Other
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : 3.3 v3 : 6.5

04 Jan 2022, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-01-04 16:15

Updated : 2024-11-21 06:41

NVD link : CVE-2022-20021

Mitre link : CVE-2022-20021

CVE.ORG link : CVE-2022-20021

JSON object : View

Products Affected

mediatek

mt8362a
awus036nh
mt7662t
mt6753
mt8385
mt6739
mt8183
mt6750s
mt6755s
mt8321
mt6630
mt6771
mt8163
mt8173
mt8765
mt6763
mt6737
mt6580
mt6757c
mt8362b
mt7668
mt8167s
mt8788
mt8167
mt6735
mt6757cd
mt6757
mt6757ch
mt7663

google

android

CWE

NVD-CWE-Other

{"id": "CVE-2022-20021", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2022-01-04T16:15:10.600", "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/January-2022", "tags": ["Vendor Advisory"], "source": "security@mediatek.com"}, {"url": "https://corp.mediatek.com/product-security-bulletin/January-2022", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198513; Issue ID: ALPS06198513."}, {"lang": "es", "value": "En Bluetooth, se presenta un posible bloqueo de la aplicaci\u00f3n debido a que bluetooth no maneja apropiadamente la recepci\u00f3n de m\u00faltiples LMP_host_connection_req. Esto podr\u00eda conllevar a una denegaci\u00f3n de servicio remota de bluetooth sin ser necesarios privilegios de ejecuci\u00f3n adicionales. No es requerida una interacci\u00f3n del usuario para su explotaci\u00f3n. ID del Parche: ALPS06198513; ID de Incidencia: ALPS06198513"}], "lastModified": "2024-11-21T06:41:57.907", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"}, {"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mediatek:awus036nh:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23A5CF60-C9DD-487C-8ABA-325D7A73694F"}, {"criteria": "cpe:2.3:h:mediatek:mt6580:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "46F71838-4E50-4F2A-9EB8-30AE5DF8511E"}, {"criteria": "cpe:2.3:h:mediatek:mt6630:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CCC85BBB-5985-41A1-B19F-1C580C367B64"}, {"criteria": "cpe:2.3:h:mediatek:mt6735:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C82E144B-0BAD-47E1-A657-3A5880988FE2"}, {"criteria": "cpe:2.3:h:mediatek:mt6737:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4E76B29F-007E-4445-B3F3-3FDC054FEB84"}, {"criteria": "cpe:2.3:h:mediatek:mt6739:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7FA8A390-9F52-4CF3-9B45-936CE3E2B828"}, {"criteria": "cpe:2.3:h:mediatek:mt6750s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "12A1CB8F-3C1C-4374-8D46-23175D1174DE"}, {"criteria": "cpe:2.3:h:mediatek:mt6753:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7362AED0-47F2-4D48-A292-89F717F0697E"}, {"criteria": "cpe:2.3:h:mediatek:mt6755s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7038AEA0-5BBE-44C9-92DE-96BDE3EEE45B"}, {"criteria": "cpe:2.3:h:mediatek:mt6757:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B4C27948-65A7-4B1E-9F10-6744D176A5C3"}, {"criteria": "cpe:2.3:h:mediatek:mt6757c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D808EF4D-0A54-4324-8341-240F7AFABC40"}, {"criteria": "cpe:2.3:h:mediatek:mt6757cd:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "64EDB89E-8140-4202-97B3-9D7337E90FDE"}, {"criteria": "cpe:2.3:h:mediatek:mt6757ch:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D2C5CC4F-DA66-4980-A4BB-693987431A38"}, {"criteria": "cpe:2.3:h:mediatek:mt6763:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2F19C76A-50DF-4ACA-BACA-07157B4D838B"}, {"criteria": "cpe:2.3:h:mediatek:mt6771:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BE4D2AED-C713-407F-A34A-52C3D8F65835"}, {"criteria": "cpe:2.3:h:mediatek:mt7662t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3331F3A6-E176-4EA5-B253-D5B03945C2B6"}, {"criteria": "cpe:2.3:h:mediatek:mt7663:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "10C79211-F064-499D-914E-0BACD038FBF4"}, {"criteria": "cpe:2.3:h:mediatek:mt7668:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8E400AB9-B82A-4449-8789-35112940270F"}, {"criteria": "cpe:2.3:h:mediatek:mt8163:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1D2ED140-C41B-418B-9DC7-8C486304E769"}, {"criteria": "cpe:2.3:h:mediatek:mt8167:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3B5FE245-6346-4078-A3D0-E5F79BB636B8"}, {"criteria": "cpe:2.3:h:mediatek:mt8167s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "639C5BDE-2E83-427A-BAB7-85EA9348AC68"}, {"criteria": "cpe:2.3:h:mediatek:mt8173:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4452EFCF-5733-40A0-8726-F8E33E569411"}, {"criteria": "cpe:2.3:h:mediatek:mt8183:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23F65D7B-31A1-4D94-82E9-254A7A6D7BE1"}, {"criteria": "cpe:2.3:h:mediatek:mt8321:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "793B7F88-79E7-4031-8AD0-35C9BFD073C4"}, {"criteria": "cpe:2.3:h:mediatek:mt8362a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2F16F2B9-D89D-4AB2-B768-CB3B22AEFE11"}, {"criteria": "cpe:2.3:h:mediatek:mt8362b:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "739BE124-C307-41B2-8E92-C223FE67F88A"}, {"criteria": "cpe:2.3:h:mediatek:mt8385:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "299378ED-41CE-4966-99B1-65D2BA1215EF"}, {"criteria": "cpe:2.3:h:mediatek:mt8765:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3AACF35D-27E0-49AF-A667-13585C8B8071"}, {"criteria": "cpe:2.3:h:mediatek:mt8788:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FE10C121-F2AD-43D2-8FF9-A6C197858220"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@mediatek.com"}

6.5 /10

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

3.3 /10

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

JSON object

Attach tags to CVE-2022-20021

6.5^/10

3.3^/10

Attach tags to `CVE-2022-20021`