PT-2022-14568 · Google · Android

Published 2022-08-11 · Updated 2022-08-16 · CVE-2022-20342

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions Android-13

Description The issue is related to an insecure default value in WiFi, which could lead to the disclosure of the WiFi password to the end user. This results in local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.

Recommendations For Android version Android-13, consider restricting access to WiFi settings to minimize the risk of exploitation until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2022-20342

Affected Products

Android

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-20342 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20342 · Vendor Advisory
• https://source.android.com/security/bulletin/android-13 · Vendor Advisory
• https://t.me/cibsecurity/48054 · Telegram Post