{"id":"PUB-A-224772890", "published":"2022-12-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2022-20503", "A-224772890"], "details":"In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/apps/Settings", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"13:0"}, {"fixed":"13:2022-12-01"}]}], "versions":["13"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/apps/Settings/+/a8ccc3456cce30fc9820463b8eadf3bc904a111b"], "severity":"Moderate", "spl":"2022-12-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"17362057474275922495040886120710217654", "length":776}, "id":"PUB-A-224772890-05397e00", "match_only_versions":["13"], "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a8ccc3456cce30fc9820463b8eadf3bc904a111b", "target":{"file":"src/com/android/settings/wifi/dpp/WifiDppConfiguratorActivity.java", "function":"handleIntent"}}, {"deprecated":false, "digest":{"line_hashes":["284409016661277852249055862271468968191", "88343878351731781467530812455841524601", "268410833658765093990161559055301838959", "196404895235203806792852603024638757159", "145619341685230890904485357133784252748", "12739285103991228539654874115911569765", "97728168410840271744904920456774192143", "88217963427347387323026523374435631321", "263559086293115197460536902851089762306", "286507731333821125958766463084935498760", "187090161818788161472812566479284379283", "139897086758789540371648451576876444314", "149632712310068680959323103405220691226", "184668579298472044786153662318600052837", "288266156223492552929657424203223801702", "177752152982758136672219732239250502513", "40627836306868213110787682227972314116", "220884027888050459794073188008898298494", "67285741456772442012070940876174401461"], "threshold":0.9}, "id":"PUB-A-224772890-e211b2ea", "match_only_versions":["13"], "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/apps/Settings/+/a8ccc3456cce30fc9820463b8eadf3bc904a111b", "target":{"file":"src/com/android/settings/wifi/dpp/WifiDppConfiguratorActivity.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2022-12-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/apps/Settings/+/a8ccc3456cce30fc9820463b8eadf3bc904a111b"}]}