First published: Fri Aug 05 2022(Updated: )
Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.
Credit: mobile.security@samsung.com mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Charm | <1.2.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this security issue in Charm by Samsung is CVE-2022-33733.
The title of this security vulnerability is 'Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3'.
This vulnerability allows an attacker to get Bluetooth connection information without permission by exploiting the onCharacteristicRead function in Charm by Samsung prior to version 1.2.3.
The severity level of CVE-2022-33733 is medium, with a severity value of 3.3.
Yes, the fix for this vulnerability is to update Charm by Samsung to version 1.2.3 or later.