PT-2022-17539
CVE-2022-25814
·
تاريخ النشر
2022-03-08
·
تاريخ التحديث
2022-03-16
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Wearable Manager Installer versions prior to SMR Mar-2022 Release 1
Description
The issue allows local attackers to perform unauthorized actions without permission by hijacking the
PendingIntent. This can lead to exploitation where attackers gain access to perform actions that are not authorized.Recommendations
For versions prior to SMR Mar-2022 Release 1, update to SMR Mar-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Wearable Manager Installer to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾