CVEvulnerability

CVE-2022-37193

7.4 HIGH Published 2022-09-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-522

Description

Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from access revocation evasion attacks once the malicious sharee obtains the access credentials.

Affected configurations

• chipolo chipolo 4.13.0

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References