CVE-2023-21179 is a high-severity local escalation of privilege vulnerability affecting Android 13. It stems from an improper cryptographic implementation in the XmlUtil.java component, allowing a bypass of user-specified Wi-Fi encryption protocols. This flaw has a CVSS score of 7.8, indicating high confidentiality, integrity, and availability impacts, and requires no user interaction or additional execution privileges for exploitation. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
13.0CPE matchmatch criteria | cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.