PT-2023-13495 · Zebra · Zebra Enterprise Home Screen

Alexandre Guldner + 1 · Published 2023-01-10 · Updated 2025-04-09 · CVE-2022-36443

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zebra Enterprise Home Screen version 4.1.19

Description An issue was discovered that allows the use of a physical connection (Ethernet cable) without restriction, even when some communication channels are locked by the administrator.

Recommendations For Zebra Enterprise Home Screen version 4.1.19, consider restricting access to the Ethernet port or implementing additional security measures to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-36443

Affected Products

Zebra Enterprise Home Screen

References · 6

• https://osv.dev/vulnerability/CVE-2022-36443 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36443 · Security Note
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-36443 · Note
• https://zebra.com/us/en/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html · Note
• https://t.me/cvenotify/118468 · Telegram Post
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36443 · Note