Skip to content
OpenAdvisories
Medium · 5.7 CVE-2023-21422 EUVD-2023-25590GHSA-fqp8-5p4x-f5mw

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DN…

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices R(11), S(12) – < SMR Jan-2023 Release 1 SMR Jan-2023 Release 1

References