Skip to content
OpenAdvisories
Medium · 5.1 CVE-2023-21424 EUVD-2023-25592GHSA-jhjc-78hv-55v9

Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows atta…

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows attacker to modify network related values, network code, carrier id and operator brand.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices R(11), S(12), T(13) – < SMR Jan-2023 Release 1 SMR Jan-2023 Release 1

References