CVE-2022-35222CWE-787

HiCOS Citizen verification component - Stack Buffer Overflow

Medium · published August 2, 2022

CVSS v3.1
6.8
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-08-02T15:21Z
EPSS history
Timeline
  • 02 AUG 15:21Z
    HiCOS Citizen verification component - Stack Buffer Overflow
    cvelistv5