PT-2022-16396

CVE-2022-23995

·

Published

2022-02-11

·

Updated

2022-02-22

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Wear OS version 3.0 prior to Firmware update Feb-2022 Release
Description The issue concerns an unprotected component vulnerability in the StBedtimeModeAlarmReceiver. This vulnerability allows untrusted applications to change bedtime mode without proper permission.
Recommendations For Wear OS version 3.0, apply the Firmware update Feb-2022 Release to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
CWE-276: Incorrect Default Permissions
Related identifiers
CVE-2022-23995
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com