CVE-2022-39083: Command Injection
Published Jan 4, 2023
·Updated
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Affected Software
16 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Jan 4, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-39083?
CVE-2022-39083 has a severity rating indicating a low to moderate risk due to the potential for local privilege escalation.
2
How do I fix CVE-2022-39083?
To fix CVE-2022-39083, ensure that you update your Android device to the latest version released by Google, which contains the necessary security patches.
3
What versions of Android are affected by CVE-2022-39083?
CVE-2022-39083 affects Android versions 10.0, 11.0, and 12.0.
4
Can CVE-2022-39083 be exploited remotely?
No, CVE-2022-39083 requires local access to the device to be exploited.
5
What are the potential impacts of CVE-2022-39083?
The impact of CVE-2022-39083 includes unauthorized access to system execution privileges which could allow an attacker to execute arbitrary commands.