Lucene search

K
cve[email protected]CVE-2022-33723
HistoryAug 05, 2022 - 4:15 p.m.

CVE-2022-33723

2022-08-0516:15:13
CWE-1021
web.nvd.nist.gov
42
4
cve-2022-33723
bluetoothscandialog
smr
tapjacking
overlay attack

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

28.8%

A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack.

Affected configurations

NVD
Node
googleandroidMatch10.0
OR
googleandroidMatch11.0
OR
googleandroidMatch12.0
VendorProductVersionCPE
googleandroid12.0cpe:/o:google:android:12.0:::
googleandroid11.0cpe:/o:google:android:11.0:::
googleandroid10.0cpe:/o:google:android:10.0:::

CNA Affected

[
  {
    "product": "Samsung Mobile Devices",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "SMR Aug-2022 Release 1",
        "status": "affected",
        "version": "  Q(10), R(11), S(12)",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

28.8%

Related for CVE-2022-33723