CVE-2022-31755

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-281

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-317565.5The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-317577.5The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentialitCVE-2022-317584.7The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-317595.5AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availabilitCVE-2022-31767.8There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the curreCVE-2022-317609.1Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerCVE-2022-317617.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentiality.CVE-2022-317627.8The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.CVE-2022-317635.5The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect sysCVE-2022-317648.5The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. ThisCVE-2022-317658.8Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escaCVE-2022-317668.6A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NA
CVE-2022-31755: Medium severity, CVSS 5.5 | Vulnix