CVE-2024-20153: High severity linuxfoundation Yocto vulnerability
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20153?
CVE-2024-20153 has a severity rating that indicates it can lead to remote information disclosure without requiring additional execution privileges.
How do I fix CVE-2024-20153?
To fix CVE-2024-20153, apply Patch ID: ALPS08990446 or ALPS09057442 depending on your affected software version.
Which systems are affected by CVE-2024-20153?
CVE-2024-20153 affects Linux Foundation Yocto versions 3.3, 4.0, and 5.0, as well as Google Android versions 14.0 and 15.0.
Is user interaction required to exploit CVE-2024-20153?
No, user interaction is not needed for the exploitation of CVE-2024-20153.
Can CVE-2024-20153 lead to code execution?
CVE-2024-20153 does not require additional execution privileges, so it is limited to information disclosure rather than code execution.