Cyber Resilience

CVE-2022-32666

High

Published: 04 July 2023

Published
04 July 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0312 87.1th percentile
Risk Priority 17 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-32666 is a high-severity an unspecified weakness vulnerability in Linuxfoundation Yocto. Its CVSS base score is 7.5 (High).

Operationally, ranked in the top 12.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220829014; Issue ID:…

more

GN20220829014.

CWE(s)
NVD-CWE-Other

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

linuxfoundation
yocto
4.0
mediatek
mt7603 firmware
7.6.6.0
mediatek
mt7613 firmware
7.6.6.0
mediatek
mt7615 firmware
7.6.6.0
mediatek
mt7622 firmware
7.6.6.0
mediatek
mt7628 firmware
7.6.6.0
mediatek
mt7629 firmware
7.6.6.0
mediatek
mt7915 firmware
7.6.6.0
mediatek
mt7916 firmware
7.6.6.0
mediatek
mt7981 firmware
7.6.6.0
+2 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References