CVE-2022-36442

CVSS 5.5 MEDIUMEPSS 0.2%CWE-284

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 jan 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Produtos afetados

n/a · n/a

Referências

https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-36442 https://excellium-services.com/cert-xlm-advisory/CVE-2022-36442 https://www.zebra.com/us/en/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html