CVE-2023-21115
First published: Mon Jun 05 2023(Updated: )
In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-258834033
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | =11.0 | |
| Google Android | =12.0 | |
| Google Android | =12.1 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-21115?
CVE-2023-21115 has a high severity due to the potential for privilege escalation without user interaction.
How do I fix CVE-2023-21115?
To mitigate CVE-2023-21115, ensure that your Android device is updated to the latest security patch that addresses this vulnerability.
What types of devices are affected by CVE-2023-21115?
CVE-2023-21115 affects Android versions 11.0, 12.0, and 12.1.
Can CVE-2023-21115 be exploited remotely?
No, CVE-2023-21115 does not require user interaction for exploitation but involves pairing with a vulnerable device.
What are the implications of CVE-2023-21115 for users?
Users potentially face unauthorized privilege escalation on paired devices, which could compromise device security.
- agent/type
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/description
- agent/softwarecombine
- agent/event
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/google
- canonical/google android
- version/google android/11.0
- version/google android/12.0
- version/google android/12.1