PUB-A-310053150

See a problem?

Import Source

https://storage.googleapis.com/android-osv/PUB-A-310053150.json

JSON Data

https://api.osv.dev/v1/vulns/PUB-A-310053150

Aliases

A-310053150
CVE-2024-22005

Published

2024-03-01T00:00:00Z

Modified

2024-08-29T06:58:09.114661Z

Summary

[24Q1][Wifi][HK3/SB3] P23 can connect to the enterprise wlan with wrong credential later after it connect with correct credential at the beginning

Details

In TBD of TBD, there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2024-03-01

Affected packages

Android / :unknown:

Package

Name: :unknown:

Affected ranges

Type: ECOSYSTEM
Events: Introduced

Pixel-family specific:0

Fixed

Pixel-family specific:2024-03-05

Affected versions

Other

Pixel-family specific

Ecosystem specific

{
    "spl": "2024-03-05",
    "severity": "High",
    "types": [
        "EoP"
    ]
}