Design/Logic Flaw

2023-07-1300:15:00

PRIOn knowledge base

www.prio-n.com

design/logic flaw

device policy restriction

local privilege escalation

missing permission check

user interaction

0.0004 Low

EPSS

Percentile

5.1%

JSON

In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq12.0
androideq12.1
androideq13.0

Name	Operator	Version
android	eq	12.0
android	eq	12.1
android	eq	13.0

References

android.googlesource.com/platform/packages/apps/Settings/+/edd4023805bc7fa54ae31de222cde02b9012bbc4

source.android.com/security/bulletin/2023-07-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for PRION:CVE-2023-21248