6.8

CVE-2022-35222

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hinet ≫ Hicos Natural Person Credential Component Client Version3.0.3.30306 SwPlatformlinux
Hinet ≫ Hicos Natural Person Credential Component Client Version3.0.3.30404 SwPlatformmacos
Hinet ≫ Hicos Natural Person Credential Component Client Version3.1.0.00002 SwPlatformwindows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.216
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
twcert@cert.org.tw 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.