Skip to content
OpenAdvisories
Low · 2.4 CVE-2023-21512 EUVD-2023-25680GHSA-86r2-66fg-x55c

Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile not…

Published Jun 28, 2023 · Updated Nov 7, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without proper access permission.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Android 11, 12, 13 – < SMR Jun-2023 Release 1 SMR Jun-2023 Release 1

Advisories 1

References