CVE-2021-31573: Input Validation
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID: OSBNB00123234.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31573?
The severity of CVE-2021-31573 is considered critical due to its potential for remote escalation of privilege.
How do I fix CVE-2021-31573?
To fix CVE-2021-31573, apply the latest patch provided by Mediatek, identified as Patch ID A20210009.
Who is affected by CVE-2021-31573?
CVE-2021-31573 affects the Mediatek En7580 and En7528 firmware versions prior to tlm7.3.275.0-82.
Is user interaction needed for exploiting CVE-2021-31573?
No, user interaction is not needed for exploiting CVE-2021-31573.
What type of threat does CVE-2021-31573 pose?
CVE-2021-31573 poses a threat of command injection that could allow a proximal attacker to escalate privileges without prior execution access.