High · 7.5 CVE-2022-41986 EUVD-2022-45090GHSA-hrxj-63c3-4p4v

Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password…

Published Oct 24, 2022 · Updated May 7, 2025 · Assigned by jpcert

Vendor: Internet Initiative Japan Product: IIJ SmartKey

Description

Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password issued by the product under certain conditions.

Affected products

Vendor	Product	Affected	Fixed
Internet Initiative Japan	IIJ SmartKey	versions prior to 2.1.4	—

References

https://play.google.com/store/apps/details?id=jp.ad.iij.smartkey2
https://jvn.jp/en/jp/JVN74534998/index.html