hicos natural person credential component client vulnerabilities and fixes

Recent CVEs affecting hicos natural person credential component client, with upgrade or downgrade steps. 5 tracked.

Also searched as: hicosnaturalpersoncredentialcomponentclient.

hicos natural person credential component client has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-08-02. Highest priority: CVE-2022-35222 (score 32/100).

CVE-2022-35222 MEDIUM 6.8 DOWNGRADE DOWNGRADE HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient param
CVE-2022-32962 MEDIUM 6.8 DOWNGRADE DOWNGRADE HiCOS’ client-side citizen certificate component has a double free vulnerability
CVE-2022-32961 MEDIUM 6.8 DOWNGRADE DOWNGRADE HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when
CVE-2022-32960 MEDIUM 6.8 DOWNGRADE DOWNGRADE HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when
CVE-2022-32959 MEDIUM 6.8 DOWNGRADE DOWNGRADE HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when

FAQ

How do I fix hicos natural person credential component client vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is hicos natural person credential component client being exploited right now?

None of the tracked hicos natural person credential component client CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which hicos natural person credential component client CVE should I patch first?

CVE-2022-35222 currently ranks highest (32/100): HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient param.

RSS feed for hicos natural person credential component client · ← Back to latest CVEs