PT-2022-16395 · Google · Wear Os

Yu-Cheng Lin · Published 2022-02-11 · Updated 2023-06-23 · CVE-2022-23994

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Wear OS version 3.0 prior to Firmware update Feb-2022 Release

Description The issue is related to an improper access control in StBedtimeModeReceiver, allowing untrusted applications to change bedtime mode without proper permission.

Recommendations For Wear OS version 3.0, apply the Firmware update Feb-2022 Release to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-23994

Affected Products

Wear Os

References · 4

• https://osv.dev/vulnerability/CVE-2022-23994 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23994 · Security Note
• https://t.me/cvenotify/52981 · Telegram Post