CVE-2023-42689

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Dec 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-42694.3The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated CVE-2023-426907.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426917.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426927.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426937.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426947.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426957.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426967.8In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executCVE-2023-426975.5In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to CVE-2023-426985.5In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to CVE-2023-426995.5In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to CVE-2023-42706.1The Min Max Control WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a
CVE-2023-42689: High severity, CVSS 7.8 | Vulnix