CVE-2023-21248

Summary

CVE-2023-21248 is a vulnerability affecting the getAvailabilityStatus function in WifiScanningMainSwitchPreferenceController.java. This issue allows an attacker to bypass device policy restrictions without user interaction, resulting in a local privilege escalation. The vulnerability stems from a missing permission check, allowing attackers to exploit this weakness and elevate their privileges on the device, without requiring any additional execution privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.