PT-2023-13495 · Zebra · Zebra Enterprise Home Screen

Alexandre Guldner + 1 · Publicado 2023-01-10 · Atualizado 2025-04-09 · CVE-2022-36443

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zebra Enterprise Home Screen version 4.1.19

Description An issue was discovered that allows the use of a physical connection (Ethernet cable) without restriction, even when some communication channels are locked by the administrator.

Recommendations For Zebra Enterprise Home Screen version 4.1.19, consider restricting access to the Ethernet port or implementing additional security measures to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2022-36443

Produtos afetados

Zebra Enterprise Home Screen

Referências · 6

• https://osv.dev/vulnerability/CVE-2022-36443 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-36443 · Nota de Segurança
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-36443 · Nota
• https://zebra.com/us/en/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html · Nota
• https://t.me/cvenotify/118468 · Publicação no Telegram
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36443 · Nota