medium6.8
CVE-2022-32962
HiCOS’ client-side citizen certificate component has a double free vulnerability.
Impact
HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hinet | Hicos Natural Person Credential Component Client | Versions 3.0.3.30306, 3.0.3.30404, 3.1.0.00002 |