Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-21495 EUVD-2023-25663GHSA-mm88-w7xc-qj9q

Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device…

Published May 4, 2023 · Updated Feb 12, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Android 11, 12, 13 – < SMR May-2023 Release 1 SMR May-2023 Release 1

Advisories 1

References