medium6.8
CVE-2022-35222
HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation.
Impact
HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hinet | Hicos Natural Person Credential Component Client | Versions 3.0.3.30306, 3.0.3.30404, 3.1.0.00002 |