CVE-2022-36442

CVSS 5.5 MEDIUMEPSS 0.2%CWE-284

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 ene 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Productos afectados

n/a · n/a

Referencias

https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36442 https://excellium-services.com/cert-xlm-advisory/CVE-2022-36442 https://www.zebra.com/us/en/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html