PT-2022-18624 · Unknown · Uwb Firmware

Published 2022-04-11 · Updated 2023-06-28 · CVE-2022-27835

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UWB firmware versions prior to SMR Apr-2022 Release 1

Description The issue is related to an improper boundary check in the UWB firmware, which allows for arbitrary memory write. This could potentially lead to unauthorized access or control.

Recommendations For versions prior to SMR Apr-2022 Release 1, update to SMR Apr-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the UWB firmware to minimize the risk of exploitation.

Fix

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

CVE-2022-27835

Affected Products

Uwb Firmware

References · 4

• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27835 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27835 · Vendor Advisory
• https://t.me/cibsecurity/40561 · Telegram Post