Strix
26.1K

CVE-2022-32655

MEDIUMCVSS 6.7/10EPSS 0.31%

Last modified

CVE-2022-32655 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. EPSS estimates a 0.31% chance of exploitation in the next 30 days.

Description

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.

Metrics

CVSS 3.1
6.7/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.31%

22.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
MediatekMt5221 Firmware7.6.6.0
MediatekMt7603 Firmware7.6.6.0
MediatekMt7613 Firmware7.6.6.0
MediatekMt7615 Firmware7.6.6.0
MediatekMt7622 Firmware7.6.6.0
MediatekMt7628 Firmware7.6.6.0
MediatekMt7629 Firmware7.6.6.0
MediatekMt7663 Firmware7.6.6.0
MediatekMt7668 Firmware7.6.6.0
MediatekMt7682 Firmware7.6.6.0
MediatekMt7686 Firmware7.6.6.0
MediatekMt7687 Firmware7.6.6.0
MediatekMt7697 Firmware7.6.6.0
MediatekMt7902 Firmware7.6.6.0
MediatekMt7915 Firmware7.6.6.0
MediatekMt7916 Firmware7.6.6.0
MediatekMt7921 Firmware7.6.6.0
MediatekMt7933 Firmware7.6.6.0
MediatekMt7981 Firmware7.6.6.0
MediatekMt7986 Firmware7.6.6.0
MediatekMt8167s Firmware7.6.6.0
MediatekMt8175 Firmware7.6.6.0
MediatekMt8362a Firmware7.6.6.0
MediatekMt8365 Firmware7.6.6.0
MediatekMt8385 Firmware7.6.6.0
MediatekMt8518s Firmware7.6.6.0
MediatekMt8532 Firmware7.6.6.0
MediatekMt8695 Firmware7.6.6.0
MediatekMt8696 Firmware7.6.6.0
MediatekMt8788 Firmware7.6.6.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-32655?
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028.
How severe is CVE-2022-32655?
CVE-2022-32655 has a CVSS score of 6.7/10 (MEDIUM severity). The EPSS model estimates a 0.31% probability of exploitation in the next 30 days.
How do I fix CVE-2022-32655?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-32655?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST