Vulnerability · NVD

CVE-2016-2457

MEDIUM 5.5 Published on 2016-05-09

server/pm/UserManagerService.java in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows attackers to bypass intended restrictions on Wi-Fi configuration changes by leveraging guest access, aka internal bug 27411179.

Attack vector : Local No user interaction

Show raw CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS 0.19% exploit very unlikely percentile 8.9%

OS versions that fix this CVE

This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.

Android Fixed in July 2016 patch level

View on NVD ↗ Advisory · source.android.com