Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21268
HistoryAug 14, 2023 - 9:15 p.m.

Path traversal

2023-08-1421:15:00
PRIOn knowledge base
www.prio-n.com
2
mmsprovider.java
path traversal
directory permissions
denial of service
sim recognition
user interaction.

0.0004 Low

EPSS

Percentile

10.0%

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq13.0
androideq12.1

0.0004 Low

EPSS

Percentile

10.0%

Related for PRION:CVE-2023-21268