CVE-2023-21373: High severity android vulnerability
Published Oct 30, 2023
·Updated
In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
1 affected component
Google Android=14.0
Event History
Oct 30, 2023
CVE Published
via MITRE·05:01 PM
Data Sourced
via MITRE·05:01 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Telephony vulnerability?
The vulnerability ID for this Telephony vulnerability is CVE-2023-21373.
2
What is the title of this Telephony vulnerability?
The title of this Telephony vulnerability is 'In Telephony there is a possible way for a guest user to change the preferred SIM due to a missing permission check.'
3
What is the severity of CVE-2023-21373?
The severity of CVE-2023-21373 is high with a CVSS severity score of 7.8.
4
How does CVE-2023-21373 affect the affected software?
CVE-2023-21373 affects the Google Android version 14.0.
5
How can this Telephony vulnerability be exploited?
This Telephony vulnerability can be exploited without the need for user interaction.