Security Bulletin

Summary
  • Security CVES
  • High CVE-2022-39119
Minutia
  • CVE ID CVE-2022-39119
  • Title Elevation of privilege in network service
  • Description

    In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.

  • Technology Area Kernel
  • Vulnerability Type CWE-862 Missing Authorization
  • Access Vector Local
  • CVSS Rating High
  • CVSS Score 7.2
  • CVSS String CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
  • Affected Chipsets*

    SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8001

*The list of affected chipsets may not be complete. For latest information, device OEMs can contact directly at https://unisupport.unisoc.com

Vulnerability type definition
  • Abbreviation Interpretation
  • RCE Remote Code Execution
  • EoP Elevation of Privilege
  • ID Information Disclosure
  • DoS Denial of Service
  • N/A Classification not available
Version
  • Version Date Description
  • 1.0 2022-09-05