VulnerabilityModified

CVE-2022-20339

In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration.

LOW 3.3EPSS 0.10%

Does this matter?

Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own.

Description

In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. This could lead to local information disclosure of network topography with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-171572148

CVSS 3.1: 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.10% probability · 1th percentile
CISA KEV: Not listed
Affected: google/android
Source: security@android.com

References

https://source.android.com/security/bulletin/android-13Vendor Advisory
https://source.android.com/security/bulletin/android-13Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.