CVE-2021-39768: High severity android vulnerability
In Settings, there is a possible way to add an auto-connect WiFi network without the user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-202017876
Affected Software
Event History
Frequently Asked Questions
What access and user action does an attacker need to exploit this issue?
The attack vector is local and requires user interaction. No privileges or additional execution privileges are required according to the provided CVSS vector and description.
What is the potential impact if exploitation succeeds?
Successful exploitation could allow local escalation of privilege and add an auto-connect Wi-Fi network without the user's consent. The CVSS vector indicates high impact to confidentiality, integrity, and availability.
Which Android release is identified as affected?
The affected version listed is Android 12L. The issue is identified by Android ID A-202017876.