PT-2022-22640 · Unknown · Hicos Citizen Verification

How2Hack · Published 2022-08-02 · Updated 2022-08-12 · CVE-2022-35222

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HiCOS Citizen verification component (affected versions not specified)

Description The issue is caused by a stack-based buffer overflow due to insufficient parameter length validation. This allows an unauthenticated physical attacker to execute arbitrary code, manipulate system commands, or disrupt the service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-35222

Affected Products

Hicos Citizen Verification

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-35222 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35222 · Vendor Advisory
• https://twcert.org.tw/tw/cp-132-6363-f5ec2-1.html · Note