CVE-2023-41372

Summary

CVE-2023-41372 is a vulnerability affecting the Android Client application. An unprivileged third-party can exploit this issue by forging a valid broadcast intent and encrypting it with a hardcoded RSA key pair. Successful exploitation allows the attacker to arbitrarily modify the server settings, causing the application to connect to a malicious server controlled by the attacker. This vulnerability poses a significant risk to the security and integrity of the affected Android Client application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.