VDB

CVE-2023-42570

CVE-2023-42570 PUBLISHED CVSS 5.900000095367432 MEDIUM

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.

EPSS 0.20% · 10.4th percentile

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.20%
10.4th percentile

Affected Products

VendorProductVersions
Samsung MobileSamsung Mobile DevicesSMR Dec-2023 Release in Android 11, 12, 13, 14
samsungandroid14.0, 14.0, 14.0

Timeline

  • Dec 5, 2023 EPSS Score
  • Dec 5, 2023 CVE Published
  • Jan 4, 2024 EPSS Score
  • Feb 2, 2024 EPSS Score
  • Mar 3, 2024 EPSS Score
  • Apr 2, 2024 EPSS Score
  • May 2, 2024 EPSS Score
  • May 31, 2024 EPSS Score
  • Jun 30, 2024 EPSS Score
  • Jul 30, 2024 EPSS Score
  • Aug 2, 2024 CVE Updated
  • Aug 29, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›