CVE-2023-42694

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 4, 2023
Updated: Dec 6, 2023
CWE ID 862

Summary

CVE-2023-42694 is a vulnerability affecting wifi services, where a missing permission check presents an opportunity for attackers. With no additional execution privileges required, this issue allows for local escalation of privilege. The flaw lies in the wifi service's implementation, enabling an attacker to exploit this vulnerability and elevate their access to higher levels within the system. This weakness could potentially compromise critical data or functionalities, making it essential to apply the necessary patches as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share