CVE-2023-30643

Summary

CVE-2023-30643 is a recently disclosed vulnerability affecting Galaxy Themes Service. This issue involves a missing authentication mechanism that grants local attackers the ability to delete arbitrary non-preloaded applications without proper authorization. An attacker can leverage this vulnerability to manipulate the system, potentially leading to data loss or unintended changes. Prior to the SMR Jul-2023 Release 1, the Galaxy Themes Service was vulnerable to this attack, putting affected devices at risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.