Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-21461 EUVD-2023-25629GHSA-rqrp-jf3c-7j6j

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to tu…

Published Mar 16, 2023 · Updated Aug 2, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Android 12, 13 – < SMR Mar-2023 Release 1 SMR Mar-2023 Release 1

References