Lucene search

MitreCVE-2022-37193

HistorySep 27, 2022 - 11:15 p.m.

CVE-2022-37193

2022-09-2723:15:14

CWE-522

mitre

web.nvd.nist.gov

chipolo

bluetooth tracker

cve-2022-37193

access control

vulnerability

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

52.9%

JSON

Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from access revocation evasion attacks once the malicious sharee obtains the access credentials.

Affected configurations

Nvd

Node

chipolochipolo_oneMatch-

AND

chipolochipoloMatch4.13.0iphone_os

VendorProductVersionCPE
chipolochipolo_one-cpe:2.3:h:chipolo:chipolo_one:-:*:*:*:*:*:*:*
chipolochipolo4.13.0cpe:2.3:a:chipolo:chipolo:4.13.0:*:*:*:*:iphone_os:*:*

Vendor	Product	Version	CPE
chipolo	chipolo_one	-	cpe:2.3:h:chipolo:chipolo_one:-:::::::*
chipolo	chipolo	4.13.0	cpe:2.3:a:chipolo:chipolo:4.13.0:::::iphone_os::

References

chipolo.net/en-us/products/chipolo-one-4-pack

github.com/zhouxinan/CCS22MaaGIoT/blob/main/ChipoloONE.md

Social References

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

52.9%

JSON

Related for CVE-2022-37193