CVE-2022-37193

Summary

Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from access revocation evasion attacks once the malicious sharee obtains the access credentials.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://chipolo.net/en-us/products/chipolo-one-4-pack
• https://github.com/zhouxinan/CCS22MaaGIoT/blob/main/ChipoloONE.md

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://chipolo.net/en-us/products/chipolo-one-4-pack
• https://github.com/zhouxinan/CCS22MaaGIoT/blob/main/ChipoloONE.md

• ←Previous
• Next→