PT-2022-21809 · Unknown · Cid Manager

Published 2022-07-11 · Updated 2022-07-15 · CVE-2022-33693

Positive Technologies (AI Summary)

CVSS v3.1

2.3

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CID Manager versions prior to SMR Jul-2022 Release 1

Description The issue allows a local attacker to access sensitive information, specifically the iccid, via log exposure in the CID Manager. This could potentially lead to unauthorized access to sensitive data.

Recommendations For versions prior to SMR Jul-2022 Release 1, update to SMR Jul-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of exploitation.

Fix

Information Disclosure

Insertion into Log File

Weakness Enumeration

CWE-200

CWE-532

Related Identifiers

CVE-2022-33693

Affected Products

Cid Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-33693 · Security Note
• https://osv.dev/vulnerability/CVE-2022-33693 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7 · Vendor Advisory
• https://t.me/cibsecurity/46007 · Telegram Post