CVE-2022-30723

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-280CWE-755

Affected software

No affected versions have been published.

Timeline

Published
Jun 7, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-307244.3Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of BCVE-2022-307254.3Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of BluetCVE-2022-307267.8Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackCVE-2022-307275.5Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 RCVE-2022-307283.3Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.CVE-2022-307294.6Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a maCVE-2022-30736.1Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injectioCVE-2022-307304.6Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.CVE-2022-307315.5Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary private files in My FileCVE-2022-307327.5Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive informatioCVE-2022-307335.3Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone nCVE-2022-307345.3Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone
CVE-2022-30723: Medium severity, CVSS 4.3 | Vulnix