UNISOC Command Injection Vulnerability in Engineer Mode Service Allowing Privilege Escalation
Vulnerability
A command injection vulnerability has been identified in the engineer mode service of certain UNISOC products. This issue arises from inadequate input validation, which could lead to unauthorized command execution. Exploitation of this vulnerability may allow local privilege escalation without requiring additional execution privileges.
Impact
Exploitation of this vulnerability could result in unauthorized command execution, potentially leading to local privilege escalation.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
3.3remediation
0.0relevance
0.1threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.