CVE-2022-37193

—

CVSS 3.1

7.4 high

EPSS

<1%p47

Published

Sep 27, 2022 (Sep 27, 2022)

Modified

Jun 17, 2026

Description

Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from access revocation evasion attacks once the malicious sharee obtains the access credentials.

Vendors: chipolo
Products: chipolo
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.