CVE-2022-20054: Command Injection
In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06219083; Issue ID: ALPS06219083.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-20054?
CVE-2022-20054 is a vulnerability in the ims service that allows for AT command injection, leading to local privilege escalation without the need for additional execution privileges.
Who is affected by CVE-2022-20054?
The vulnerability affects devices running Google Android versions 9.0, 10.0, 11.0, and 12.0.
Is user interaction required for exploitation?
No, user interaction is not needed for exploitation of CVE-2022-20054.
What is the severity of CVE-2022-20054?
The severity of CVE-2022-20054 is rated as high, with a severity value of 7.8.
How can I fix CVE-2022-20054?
To fix CVE-2022-20054, apply the patch ID ALPS06219083 provided by Google Android or your device manufacturer.