PT-2022-16398 · Google · Wear Os

Published 2022-02-11 · Updated 2022-02-18 · CVE-2022-23997

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Wear OS version 3.0 prior to Firmware update Feb-2022 Release

Description The issue concerns an unprotected component vulnerability in the StTheaterModeDurationAlarmReceiver. This vulnerability allows untrusted applications to disable theater mode without proper permission.

Recommendations For Wear OS version 3.0, apply the Firmware update Feb-2022 Release to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-23997

Affected Products

Wear Os

References · 3

• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23997 · Security Note