VYPR
← All advisories
High severity7.2NVD Advisory· Published Sep 4, 2023· Updated Jun 17, 2026

CVE-2023-20820

CVE-2023-20820

Description

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Openwrt/Openwrt2 versions
    cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*
    • cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*
  • Mediatek/wlan servicellm-fuzzy
  • MediaTek, Inc./MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT7626, MT7629, MT7915, MT7916, MT7981, MT7986, MT7990v5
    Range: OpenWRT 19.07, 21.02

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.