4.0
Medium
CVE-2022-28790 Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device
Description
Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device. The patch adds proper caller signature check logic.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Link to Windows Service 2.3 | earliest → < 2.3.04.1 | 2.3.04.1 |