Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-42570 EUVD-2023-47003GHSA-hc5p-6q54-7p32

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.

Published Dec 5, 2023 · Updated Aug 2, 2024 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Dec-2023 Release in Android 11, 12, 13, 14

References