CVE-2023-21230

Summary

CVE-2023-21230 is a vulnerability affecting the Wi-Fi access point change functionality in AccessPointPreference.java. The issue lies in a precondition check failure in the 'onAccessPointChanged' method, which allows unprivileged apps to receive broadcasts about Wi-Fi access point changes, including the BSSID or SSID. This disclosure of local information occurs without the need for additional execution privileges or user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.