CVE-2015-6623

Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or…

published December 8, 2015

CVSS
—
EPSS
1%
Percentile
47.3
In the wild
Unconfirmed
What it is

⚠️ A crafty app could elevate its privileges on Android 6.0, like a sneaky guest getting access to the VIP lounge at a party! It's like allowing someone to sneak past the bouncers at a club; they can suddenly access areas only a select few should ever go. This vulnerability means that an untrusted app could gain unauthorized access to sensitive system features, putting your device security at risk. An attacker could exploit this vulnerability to gain elevated permissions on the device, potentially accessing sensitive data or altering system settings. Imagine a party crasher suddenly being able to control the music or the lights, making things quite chaotic!

Put simply

It's like allowing someone to sneak past the bouncers at a club; they can suddenly access areas only a select few should ever go. This vulnerability means that an untrusted app could gain unauthorized access to sensitive system features, putting your device security at risk. This vulnerability allows crafted applications on Android 6.0 to gain privileges through improper access control, enabling them to obtain 'Signature' or 'SignatureOrSystem' permissions without appropriate checks.

What to do

An attacker could exploit this vulnerability to gain elevated permissions on the device, potentially accessing sensitive data or altering system settings. Imagine a party crasher suddenly being able to control the music or the lights, making things quite chaotic! Update your device to Android 6.0 or later with the security patch released on 2015-12-01 to safeguard against this vulnerability. Regularly check for system updates to ensure your device is protected against potential exploits. You've got this! By staying updated, you're keeping your device safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00591 · 47.3th percentile
Published
2015-12-08T23:00Z
EPSS history
Timeline
  • 08 DEC 23:00Z
    Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or…
    cvelistv5