CVE-2022-20050

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In connsyslogger, there is a possible symbolic link following due to improper link resolution. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06335038; Issue ID: ALPS06335038.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-200515.5In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial oCVE-2022-200526.5In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System executioCVE-2022-200537.8In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilCVE-2022-200547.8In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilegeCVE-2022-200556.8In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200566.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200576.5In btif, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with SystemCVE-2022-200586.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-200596.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-20067.8AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installaCVE-2022-200606.6In preloader (usb), there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation CVE-2022-200626.7In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System executio
CVE-2022-20050: Medium severity, CVSS 6.7 | Vulnix