CVE-2022-20503

CVE-2022-20503 targets the WifiDppConfiguratorActivity.java on Android 13. In onCreate, a missing permission check allows a guest user to add a WiFi configuration, enabling local elevation of privilege with no additional execution privileges and without user interaction. The CVSSv3.1 metrics show...

CVE-2022-20503: Missing Authorization

In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20503

In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...