PT-2022-16395 · Google · Wear Os

Yu-Cheng Lin

·

CVE-2022-23994

·

Published

2022-02-11

·

Updated

2023-06-23

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Wear OS version 3.0 prior to Firmware update Feb-2022 Release
Description The issue is related to an improper access control in StBedtimeModeReceiver, allowing untrusted applications to change bedtime mode without proper permission.
Recommendations For Wear OS version 3.0, apply the Firmware update Feb-2022 Release to resolve the issue.

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-23994

Affected Products

Wear Os