Lucene search
Google_androidCVELIST:CVE-2021-39768HistoryMar 30, 2022 - 4:02 p.m.
CVE-2021-39768
2022-03-3016:02:33
google_android
www.cve.org
7
settings
auto-connect wifi
user consent
permission check
local escalation
android-12l
cve-2021-39768
In Settings, there is a possible way to add an auto-connect WiFi network without the user’s consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202017876
CNA Affected
[
{
"product": "Android",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Android-12L"
}
]
}
]Related
cve
cve
CVE-2021-39768
2022-03-30 16:15:10
prion
prion
Design/Logic Flaw
2022-03-30 16:15:00
nvd
nvd
CVE-2021-39768
2022-03-30 16:15:10
androidsecurity
androidsecurity
Android 12L Security Release Notes
2022-02-22 00:00:00