CVE-2023-40125

Summary

CVE-2023-40125 is a vulnerability affecting the APN editor feature in a specific software component. In the onCreate method of ApnEditor.java, there is a permission bypass issue that allows Guest users to modify the APN settings. This vulnerability grants local privilege escalation without requiring any additional execution privileges and can be exploited without user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.