PT-2015-2940

CVE-2015-6623

·

Published

2015-12-08

·

Updated

2015-12-09

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions prior to 2015-12-01
Description The issue is related to insufficient access control in the Wi-Fi component of the Android operating system. It allows attackers to gain privileges via a crafted application, potentially obtaining Signature or SignatureOrSystem access. This can be exploited by a remote attacker using a specially created application.
Recommendations For Android versions prior to 2015-12-01, consider restricting the use of Wi-Fi until a patch is available. As a temporary workaround, avoid installing untrusted applications to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾