CVE-2022-20214

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack

Medium · published January 24, 2023

CVSS v3.1
4.7
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overlay the toggle button to enable apps to modify system settings without user consent.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-183411210

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Published
2023-01-24T00:00Z
EPSS history
Timeline
  • 24 JAN 00:00Z
    In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack
    cvelistv5