CVE-2023-21393

Summary

CVE-2023-21393 is a vulnerability affecting the Settings component of certain systems. A missing permission check in this area allows a user to change the SIM card without proper authorization. This issue grants the user local escalation of privilege, meaning they can gain higher-level access within the system, without requiring any additional execution privileges. Notably, user interaction is not necessary for exploitation, making this a significant potential threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.