CVE-2022-28794

LOW Year: 2022
CVSS v3 Score
3.3
Low
CVSS v2 Score
2.1
Low
Weakness Type
CWE-213
View all →

Vulnerability Description

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information.

Related Vulnerabilities

CVE-2022-30714

LOW
CVSS:3.3(Low)

Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.

CWE-2132022

CVE-2022-30728

LOW
CVSS:3.3(Low)

Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.

CWE-2132022

CVE-2022-33692

LOW
CVSS:3.3(Low)

Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.

CWE-2132022

CVE-2022-33694

LOW
CVSS:3.3(Low)

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting.

CWE-2132022

CVE-2022-33696

LOW
CVSS:3.3(Low)

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.

CWE-2132022

CVE-2022-39848

LOW
CVSS:3.3(Low)

Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log.

CWE-2132022