Possible Man-in-the-Middle Attack Due to Logic Error in Code
CVE-2024-47023

8.1HIGH

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
25 October 2024

What is CVE-2024-47023?

A vulnerability exists in Android software that stems from a logic error in its underlying code structure. This vulnerability enables attackers to execute a man-in-the-middle attack, facilitating unauthorized access and manipulation of communications between devices. The consequence of this flaw is that remote escalation of privileges can occur without the need for user interaction, which significantly compromises the security architecture of the affected products. Organizations using the impacted Android versions should prioritize mitigation strategies to address this security issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Android Android kernel

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.