CVE-2022-33685 — Dead Code in Mobile Devices

CWE-561 — Dead Code3 documents3 sources

Severity

5.5MEDIUMNVD

CNA4.0

EPSS

0.0%

top 95.23%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Mobile Devices Google Android

Timeline

PublishedJul 12

Latest updateJul 13

Description

Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5samsung_mobile/samsung_mobile_devicesQ(10), R(11), S(12) — SMR Jul-2022 Release 1

▶NVDgoogle/android10.0, 11.0, 12.0+2

🔴Vulnerability Details

GHSA

GHSA-j35v-p732-4fmj: Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access sensti↗2022-07-13

▶

CVEList

CVE-2022-33685: Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access sensti↗2022-07-11

▶