PT-2023-18188
CVE-2023-21421
·
Published
2023-02-09
·
Updated
2023-02-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
KnoxCustomManagerService versions prior to SMR Jan-2023 Release 1
Description
The issue is related to improper handling of insufficient permissions or privileges in the KnoxCustomManagerService, allowing an attacker to access the device SIM PIN.
Recommendations
For versions prior to SMR Jan-2023 Release 1, update to the SMR Jan-2023 Release 1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾