CVE-2023-21474: High severity SecSettings SecSettings vulnerability
Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SMR Apr-2022 Release 1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-21474?
CVE-2023-21474 is considered a high severity vulnerability due to its potential for unauthorized access to arbitrary files with system privileges.
How do I fix CVE-2023-21474?
To mitigate CVE-2023-21474, ensure that your SecSettings software is updated to the SMR Apr-2022 Release 1 or later.
Which versions of SecSettings are affected by CVE-2023-21474?
CVE-2023-21474 affects all versions of SecSettings prior to SMR Apr-2022 Release 1.
What type of vulnerability is CVE-2023-21474?
CVE-2023-21474 is an intent redirection vulnerability that allows attackers to access files with elevated privileges.
Who is impacted by CVE-2023-21474?
Users of SecSettings versions prior to SMR Apr-2022 Release 1 are at risk from CVE-2023-21474.