MS Windows Device Administration Permission Bypass Local Priv Escalation
CVE-2023-32871 Published on May 6, 2024

In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355514; Issue ID: ALPS08355514.

NVD

Vulnerability Analysis

CVE-2023-32871 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.

Attack Vector:

LOCAL

Attack Complexity:

LOW

Privileges Required:

LOW

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

LOW

Integrity Impact:

LOW

Availability Impact:

LOW

Weakness Type

Unchecked Error Condition

[PLANNED FOR DEPRECATION. SEE MAINTENANCE NOTES AND CONSIDER CWE-252, CWE-248, OR CWE-1069.] Ignoring exceptions and other error conditions may allow an attacker to induce unexpected behavior unnoticed.

Products Associated with CVE-2023-32871

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-32871 are published in these products:

Google Android

Linux Foundation Yocto

Rdkcentral Rdk B

Openwrt

Affected Versions

MediaTek, Inc. MT2737, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6893, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8755, MT8765, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797, MT8798:

Version Android 11.0, 12.0, 13.0, 14.0 / OpenWrt 19.07, 21.02 / Yocto 3.3, 4.0 / RDK-B 22Q3 is affected.

mediatek mt6739:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6761:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6768:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6771:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6779:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6781:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6789:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6833:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6853:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6853t:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6855:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6873:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6879:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6880:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6883:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6885:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6889:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6890:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6893:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6895:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6980:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6983:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6985:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6990:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8167:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8167s:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8168:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8175:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8185:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8188:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8195:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8362a:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8365:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8385:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8390:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8395:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8755:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8765:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8766:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8768:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8775:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8781:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8786:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8788:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8789:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8791:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8791t:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8797:

Version android_11.0, <= android_14.0 is affected.

mediatek mt2737:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6765:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6785:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6835:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6877:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6886:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6897:

Version android_11.0, <= android_14.0 is affected.

mediatek mt6989:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8173:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8321:

Version android_11.0, <= android_14.0 is affected.

mediatek mt8798:

Version android_11.0, <= android_14.0 is affected.

Exploit Probability

EPSS

0.00%

Percentile

0.14%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.