CVE-2023-21220 — there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges neede — CVE Database · The Intelligence Room