CVE-2022-33734CWE-927

Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information…

Medium · published August 5, 2022

CVSS v3.1
6.2
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Weakness
CWE-927 · Use of Implicit Intent for Sensitive Communication
Published
2022-08-05T15:16Z
EPSS history
Timeline
  • 05 AUG 15:16Z
    Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information…
    cvelistv5