CVE-2023-21985

CVE-2023-21985 is a high-severity vulnerability affecting Oracle Solaris versions 10 and 11, specifically within its Utility component. A highly privileged attacker with logon access to the infrastructure can exploit this vulnerability, leading to a complete takeover of the Oracle Solaris system. Successful exploitation requires human interaction from a non-attacker and can impact additional products beyond Solaris. The vulnerability has a CVSS 3.1 Base Score of 7.7, indicating high impacts on confidentiality, integrity, and availability. It is a local attack (AV:L) with low attack complexity (AC:L) but requires high privileges (PR:H) and user interaction (UI:R). The scope change (S:C) signifies that attacks may affect other systems. Currently, there is no evidence of active exploitation, nor is public exploit code available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.