CVE-2022-35222: Hinet Hicos Natural Person Credential Component Client

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

Affected products

• Hinet Hicos Natural Person Credential Component Client: version 3.0.3.30306 only; version 3.0.3.30404 only; version 3.1.0.00002 only

Published 2022-08-02. Last modified 2026-06-17.