CVE-2022-35222

MEDIUM

HiCOS Citizen Verification Component - Stack-based Buffer Overflow via Insufficient Parameter Length Validation

Title source: llm
STIX 2.1

Description

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.twcert.org.tw/tw/cp-132-6363-f5ec2-1.html

Scores

CVSS v3 6.8
EPSS 0.0035
EPSS Percentile 26.8%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (3)
hinet/hicos_natural_person_credential_component_client 3.0.3.30306
hinet/hicos_natural_person_credential_component_client 3.0.3.30404
hinet/hicos_natural_person_credential_component_client 3.1.0.00002
Published Aug 02, 2022
Tracked Since Feb 18, 2026