Code injection

2023-01-1021:15:00

PRIOn knowledge base

www.prio-n.com

zebra enterprise

home screen

code injection

google chrome

unauthorized application

apk

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK.

CPENameOperatorVersion
enterprise_home_screeneq4.1.19

CPE	Name	Operator	Version
	enterprise_home_screen	eq	4.1.19

References

excellium-services.com/cert-xlm-advisory/CVE-2022-36442

www.zebra.com/us/en/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html