CVE-2023-21242
CVE-2023-21242
In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Productos afectados
Google · Android¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →