Lucene search

K
vulnrichmentGoogle_androidVULNRICHMENT:CVE-2023-21373
HistoryOct 30, 2023 - 5:01 p.m.

CVE-2023-21373

2023-10-3017:01:34
google_android
github.com
telephony
guest user
preferred sim
local escalation
privilege
exploitation

AI Score

7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

7

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-21373