Lucene search
PRIOn knowledge basePRION:CVE-2023-40125HistoryOct 27, 2023 - 9:15 p.m.
Design/Logic Flaw
2023-10-2721:15:00
PRIOn knowledge base
www.prio-n.com
1
design flaw
logic flaw
permission bypass
local privilege escalation
user interaction loophole
nvd
0.0004 Low
EPSS
Percentile
5.1%
In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Related
cnvd
cnvd
Google Android elevation of privilege vulnerability (CNVD-2024-05388)
2023-10-31 00:00:00
osv
osv
Modifying global APN settings as an unprivileged secondary user
2023-10-01 00:00:00
cvelist
cvelist
CVE-2023-40125
2023-10-27 20:22:57
nvd
nvd
CVE-2023-40125
2023-10-27 21:15:08
cve
cve
CVE-2023-40125
2023-10-27 21:15:08