CVE-2022-35222: HiCOS Citizen verification component - Stack Buffer Overflow

Published Aug 2, 2022

Updated

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

Affected Software

3 affected components

HiNet Hicos Natural Person Credential Component Client Linux=3.0.3.30306

HiNet Hicos Natural Person Credential Component Client Macos=3.0.3.30404

HiNet Hicos Natural Person Credential Component Client Windows=3.1.0.00002

Remediation

Information

Download the latest version

Event History

Aug 2, 2022

CVE Published

via MITRE·03:21 PM

Data Sourced

via MITRE·03:21 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-35222?

CVE-2022-35222 has a medium severity rating of 6.8.

How can I fix CVE-2022-35222?

To fix CVE-2022-35222, users should download the latest version of the HiCOS Citizen verification component.

What type of vulnerability is CVE-2022-35222?

CVE-2022-35222 is a stack buffer overflow vulnerability due to insufficient parameter length validation.

Who can exploit CVE-2022-35222?

An unauthenticated physical attacker can exploit CVE-2022-35222 to execute arbitrary code or disrupt service.

What software is affected by CVE-2022-35222?

CVE-2022-35222 affects the HiNet Hicos Natural Person Credential Component Client on Linux, MacOS, and Windows.