CVE-2023-20820

No fix known EPSS 2%

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.

Published 2023-09-04 · CVE record · OSV

Products: MediaTek, Inc. MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986, MT7990, mediatek mt6890, mediatek mt7603, mediatek mt7612, mediatek mt7613, mediatek mt7615, mediatek mt7622, mediatek mt7626, mediatek mt7629, mediatek mt7915, mediatek mt7916, mediatek mt7981, mediatek mt7986, mediatek mt7990