PT-2023-13493 · Google+1 · Gboard+1

Alexandre Guldner + 1 · Published 2023-01-10 · Updated 2025-04-09 · CVE-2022-36441

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zebra Enterprise Home Screen version 4.1.19

Description An issue was discovered where the Gboard used by different applications can be used to launch and use several other applications that are restricted by the admin.

Recommendations For Zebra Enterprise Home Screen version 4.1.19, consider restricting access to the Gboard to prevent the launch of restricted applications until a patch is available.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-36441

Affected Products

Gboard

Zebra Enterprise Home Screen

References · 7

• https://osv.dev/vulnerability/CVE-2022-36441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36441 · Security Note
• https://zebra.com/fr/fr/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html · Note
• https://t.me/cibsecurity/56319 · Telegram Post
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-36441 · Note
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36441 · Note
• https://t.me/cvenotify/118466 · Telegram Post