CVE-2023-4164 HIGH

CVE-2023-4164: There is a possible information disclosure due to a missing permission check in Pixel Watch

Weakness CWE-200 · Info exposure

Published January 2, 2024

Last update September 6, 2024

View on NVD All CVEs

CVSS base score

8.4/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed.

Key dates

02Disclosure timeline

January 2, 2024 CVE published

September 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-4164 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2021-34707 Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability CVE-2025-20345 Cisco Duo Authentication Proxy Information Disclosure Vulnerability CVE-2026-9836 IBM DataStage Flow Designer application is affected by an information disclosure vulnerability CVE-2021-25376 CVE-2014-125093 Ad Blocking Detector Plugin ad-blocking-detector.php information disclosure