CVE-2022-37193
Summary
| CVE | CVE-2022-37193 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-09-27 23:15:00 UTC |
| Updated | 2022-10-03 18:26:00 UTC |
| Description | Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from access revocation evasion attacks once the malicious sharee obtains the access credentials. |
Risk And Classification
Problem Types: CWE-522
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Chipolo | Chipolo | 4.13.0 | All | All | All |
| Hardware | Chipolo | Chipolo One | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Chipolo ONE 4 Pack - Chipolo | MISC | chipolo.net | |
| CCS22MaaGIoT/ChipoloONE.md at main · zhouxinan/CCS22MaaGIoT · GitHub | MISC | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.