CVE-2022-33686 — Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log

LOW

Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log

Published Jul 11, 2022

2.3

LOW

CVSS 3.1

EPSS 0.10%

Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
Q(10), R(11), S(12)	affected	<SMR Jul-2022 Release 1

No remediation recorded yet.

0.10% 0.00101

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00101

2022–2026

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.10% (0.00101)	0.83th	v5 (v2026.06.15)
Jun 15, 2026	0.10% (0.00097)	0.94th	v5 (v2026.06.15)
Mar 17, 2025	0.02% (0.00016)	1.98th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00042)	5.63th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 13, 2023	0.89% (0.00885)	27.56th	v2 (v2022.01.01)
Jul 12, 2022	0.89% (0.00885)	25.53th	v2 (v2022.01.01)