CVE-2022-47339: Command Injection
Published Feb 6, 2023
·Updated
In cmd services, there is a OS command injection issue due to missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
Affected Software
33 affected components
Google Android=10.0
Google Android=11.0
Google Android=12.0
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Google Android
All of the following
Any of the following
Google Android=10.0
Google Android=11.0
Google Android=12.0
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Event History
Feb 6, 2023
CVE Published
via Android·12:00 AM
CVE Published
via MITRE·05:26 AM
Data Sourced
via MITRE·05:26 AM
Description
Feb 12, 2023
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-47339?
CVE-2022-47339 has a high severity rating due to the potential for local escalation of privilege.
2
How do I fix CVE-2022-47339?
To fix CVE-2022-47339, ensure that permission checks are appropriately implemented in the affected cmd services.
3
What software versions are affected by CVE-2022-47339?
CVE-2022-47339 affects Google Android versions 10.0, 11.0, and 12.0.
4
What vulnerabilities does CVE-2022-47339 introduce?
CVE-2022-47339 introduces an OS command injection vulnerability that could allow unauthorized command execution.
5
Who is primarily affected by CVE-2022-47339?
Users of Google Android devices running the specified vulnerable versions are primarily affected by CVE-2022-47339.