Device Reset Vulnerability in LG Mobile Devices
CVE-2022-23728

6.1MEDIUM

Key Information:

Vendor

Google
Status
Lg Mobile Devices
Vendor
CVE Published:
21 January 2022

What is CVE-2022-23728?

A security vulnerability in LG mobile devices allows attackers to reset the device remotely by sending specific AT Commands during the boot process. This vulnerability could lead to unauthorized device resets, impacting user experience and security. The affected product ID associated with this issue is LVE-SMP-210011. Users are advised to stay informed and apply necessary security measures detailed in the vendor's security bulletin.

Affected Version(s)

LG mobile devices Prior device to Android OS version 11

References

https://lgsecurity.lge.com/bulletins/mobile
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.