Lucene search

K
nvd[email protected]NVD:CVE-2022-41614
HistoryFeb 16, 2023 - 9:15 p.m.

CVE-2022-41614

2023-02-1621:15:13
CWE-522
web.nvd.nist.gov
1
intel
on event series
android
version 2.0
information disclosure
local access

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0

Percentile

13.2%

Insufficiently protected credentials in the Intelยฎ ON Event Series Android application before version 2.0 may allow an authenticated user to potentially enable information disclosure via local access.

Affected configurations

Nvd
Node
intelon_event_seriesRange<2.0android
VendorProductVersionCPE
intelon_event_series*cpe:2.3:a:intel:on_event_series:*:*:*:*:*:android:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0

Percentile

13.2%

Related for NVD:CVE-2022-41614