VDB

CISA-2022-20481

CISA-2022-20481 PUBLISHED CVSS 5.5 MEDIUM

Reported by google_android · Published February 28, 2023

In multiple files, there is a possible way to preserve WiFi settings due to residual data after a reset. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-241927115

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
n/aAndroidAndroid-10 Android-11 Android-12 Android-12L Android-13
n/aAndroidAndroid-10 Android-11 Android-12 Android-12L Android-13, *

Timeline

  • Feb 28, 2023 CVE Published
  • Mar 21, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›