CVE-2023-20820: Input Validation
First published: Mon Sep 04 2023(Updated: )
In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.
Credit: security@mediatek.com security@mediatek.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenWrt OpenWrt | =19.07.0 | |
| OpenWrt OpenWrt | =21.02.0 | |
| Mediatek Mt6890 | ||
| Mediatek Mt7603 | ||
| Mediatek Mt7612 | ||
| Mediatek Mt7613 | ||
| Mediatek Mt7615 | ||
| Mediatek Mt7622 | ||
| Mediatek Mt7626 | ||
| Mediatek Mt7629 | ||
| Mediatek Mt7915 | ||
| Mediatek Mt7916 | ||
| Mediatek Mt7981 | ||
| Mediatek Mt7986 | ||
| Mediatek Mt7990 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this wlan service vulnerability?
The vulnerability ID for this wlan service vulnerability is CVE-2023-20820.
What is the severity rating of CVE-2023-20820?
CVE-2023-20820 has a severity rating of 7.2 (high).
Is user interaction required for exploitation of CVE-2023-20820?
No, user interaction is not needed for exploitation of CVE-2023-20820.
Which software versions are affected by CVE-2023-20820?
OpenWrt versions 19.07.0 and 21.02.0 are affected by CVE-2023-20820.
How can I fix the vulnerability CVE-2023-20820?
To fix the vulnerability CVE-2023-20820, apply the provided patch ID: WCNCR00244189.
- agent/weakness
- agent/author
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/severity
- agent/references
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/openwrt
- canonical/openwrt openwrt
- version/openwrt openwrt/19.07.0
- version/openwrt openwrt/21.02.0
- vendor/mediatek
- canonical/mediatek mt6890
- canonical/mediatek mt7603
- canonical/mediatek mt7612
- canonical/mediatek mt7613
- canonical/mediatek mt7615
- canonical/mediatek mt7622
- canonical/mediatek mt7626
- canonical/mediatek mt7629
- canonical/mediatek mt7915
- canonical/mediatek mt7916
- canonical/mediatek mt7981
- canonical/mediatek mt7986
- canonical/mediatek mt7990