Lucene search
HistoryAug 05, 2022 - 4:15 p.m.
CVE-2022-33727
secdevicepickerdialog
smr aug-2022
tapjacking
overlay attack
bluetooth device
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
28.8%
A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via tapjacking/overlay attack.
Affected configurations
Node
googleandroidMatch10.0
ORgoogleandroidMatch11.0
ORgoogleandroidMatch12.0
Related
cvelist
cvelist
CVE-2022-33727
2022-08-05 15:13:43
prion
prion
Code injection
2022-08-05 16:15:00
cve
cve
CVE-2022-33727
2022-08-05 16:15:13
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
28.8%
Related for NVD:CVE-2022-33727