CVE-2022-22266: Medium severity android vulnerability

Published Jan 7, 2022

Updated

(Applicable to China models only) Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allows untrusted applications to get WiFi information without proper permission.

Affected Software

3 affected components

Google Android=9.0

Google Android=10.0

Google Android=11.0

Event History

Jan 7, 2022

CVE Published

via MITRE·10:39 PM

Data Sourced

via MITRE·10:39 PM

DescriptionSeverityWeakness

Jan 10, 2022

Data Sourced

via NVD·02:12 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-22266?

CVE-2022-22266 is rated as a moderate severity vulnerability affecting specific models in the TencentWifiSecurity application.

How do I fix CVE-2022-22266?

To mitigate CVE-2022-22266, update the TencentWifiSecurity application to the latest version provided in the SMR Jan-2022 Release 1.

What systems are affected by CVE-2022-22266?

CVE-2022-22266 affects Google Android versions 9.0, 10.0, and 11.0 on applicable China models.

What type of vulnerability is CVE-2022-22266?

CVE-2022-22266 is an unprotected service vulnerability that allows unauthorized access to WiFi information.

Can untrusted applications utilize CVE-2022-22266?

Yes, untrusted applications can exploit CVE-2022-22266 to access WiFi information without proper permissions.