CVE-2022-20034

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation

published February 9, 2022

CVSS
—
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06160806; Issue ID: ALPS06160806.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00095 · 0.6th percentile
Published
2022-02-09T22:05Z
EPSS history
Timeline
  • 09 FEB 22:05Z
    In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation
    cvelistv5