CVE-2023-2091CWE-78

KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection

High · published April 15, 2023

CVSS v3.1
7.8
EPSS
1%
Percentile
73.6
In the wild
Unconfirmed
What it is

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjust_cpufreq_scaling_governer. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.4.13 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-226099.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01473 · 73.6th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2023-04-15T08:40Z
EPSS history
Timeline
  • 15 APR 08:40Z
    KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection
    cvelistv5