Lucene search

MitreCVE-2022-36443

HistoryJan 10, 2023 - 9:15 p.m.

CVE-2022-36443

2023-01-1021:15:11

mitre

web.nvd.nist.gov

zebra enterprise

home screen

cve-2022-36443

network security

device management

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

12.7%

JSON

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communication channels (wireless and SD card) but it is still possible to use a physical connection (Ethernet cable) without restriction.

Affected configurations

Nvd

Node

zebraenterprise_home_screenMatch4.1.19

VendorProductVersionCPE
zebraenterprise_home_screen4.1.19cpe:2.3:a:zebra:enterprise_home_screen:4.1.19:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zebra	enterprise_home_screen	4.1.19	cpe:2.3:a:zebra:enterprise_home_screen:4.1.19:::::::*

References

excellium-services.com/cert-xlm-advisory/CVE-2022-36443

www.zebra.com/us/en/products/software/mobile-computers/mobile-app-utilities/enterprise-home-screen.html

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

Percentile

12.7%

JSON

Related for CVE-2022-36443