CVE-2023-21115

HIGH Year: 2023
CVSS v3 Score
8.8
High
Weakness Type
CWE-327
View all →

Vulnerability Description

In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used crypto. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12LAndroid ID: A-258834033

Related Vulnerabilities

CVE-2018-10084

HIGH
CVSS:8.8(High)

CMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this->_loginkey] to equal 1, be...

CWE-3272018

CVE-2019-9013

HIGH
CVSS:8.8(High)

An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All va...

CWE-3272019

CVE-2023-47640

HIGH
CVSS:8.8(High)

DataHub is an open-source metadata platform. The HMAC signature for DataHub Frontend sessions was being signed using a SHA-1 HMAC with the frontend secret key. SHA1 with a 10 byte key can be brute for...

CWE-3272023

CVE-2024-40465

HIGH
CVSS:8.8(High)

An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the getCacheFileName function in file.go file

CWE-3272024

CVE-2024-48016

HIGH
CVSS:8.8(High)

Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could po...

CWE-3272024

CVE-2024-31989

CRITICAL
CVSS:9.0(Critical)

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It has been discovered that an unprivileged pod in a different namespace on the same cluster could connect to the Redis server...

CWE-3272024