CVE-2023-21220

HIGH

Android - Cleartext Transmission of Sensitive Information via Cellular Network

Title source: llm
STIX 2.1

Description

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-264590585References: N/A

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0032
EPSS Percentile 23.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (1)
google/android
Published Jun 28, 2023
Tracked Since Feb 18, 2026