CVE-2022-23728

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Attacker can reset the device with AT Command in the process of rebooting the device. The LG ID is LVE-SMP-210011.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-684

Affected software

VendorProductVersions
n/aLG mobile devicesPrior device to Android OS version 11

References

Timeline

Published
Jan 21, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-237297.8When the device is in factory state, it can be access the shell without adb authentication process. The LG ID is LVE-SMP-210010.CVE-2022-23735.3The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing authorisation in a REST endpoint, allowing unauthenticated usersCVE-2022-237309.8The public API error causes for the attacker to be able to bypass API access control.CVE-2022-237317.8V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.CVE-2022-237328.8A path traversal vulnerability was identified in GitHub Enterprise Server management console that allowed the bypass of CSRF protections. ThCVE-2022-237335.4A stored XSS vulnerability was identified in GitHub Enterprise Server that allowed the injection of arbitrary attributes. This injection wasCVE-2022-237348.8A deserialization of untrusted data vulnerability was identified in GitHub Enterprise Server that could potentially lead to remote code execCVE-2022-237376.5An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improper privileges to creCVE-2022-237385.7An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repositoCVE-2022-237399.8An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileges in GraphQL API reCVE-2022-23744.8The Simply Schedule Appointments WordPress plugin before 1.5.7.7 does not sanitise and escape some of its settings, which could allow high pCVE-2022-237408.8CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabl
CVE-2022-23728: Medium severity, CVSS 6.1 | Vulnix