Lucene search

JpcertCVE-2022-41986

HistoryOct 24, 2022 - 2:15 p.m.

CVE-2022-41986

2022-10-2414:15:52

jpcert

web.nvd.nist.gov

cve-2022-41986

information disclosure

iij smartkey

android app

vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

48.7%

JSON

Information disclosure vulnerability in Android App ‘IIJ SmartKey’ versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions.

Affected configurations

Nvd

Vulners

Node

iijiij_smartkeyRange<2.1.4android

VendorProductVersionCPE
iijiij_smartkey*cpe:2.3:a:iij:iij_smartkey:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
iij	iij_smartkey	*	cpe:2.3:a:iij:iij_smartkey::::::android::*

CNA Affected

[
  {
    "vendor": "Internet Initiative Japan Inc.",
    "product": "IIJ SmartKey",
    "versions": [
      {
        "version": "versions prior to 2.1.4",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN74534998/index.html

play.google.com/store/apps/details?id=jp.ad.iij.smartkey2

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

48.7%

JSON

Related for CVE-2022-41986