Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2022-20355 | In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could l… | Medium (5.5) | 2022-08-10 | Environment Specific |
| CVE-2022-20354 | In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This c… | High (7.8) | 2022-08-10 | Environment Specific |
| CVE-2022-20353 | In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input … | Medium (5.5) | 2022-08-10 | Environment Specific |
| CVE-2022-20352 | In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request l… | Medium (5.5) | 2022-08-10 | Environment Specific |
| CVE-2022-20350 | In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notifi… | Medium (5.5) | 2022-08-10 | Environment Specific |