VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Dec 5, 2023· Updated Jun 17, 2026

CVE-2023-42570

CVE-2023-42570

Description

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • Samsung Mobile/Android16 versions
    cpe:2.3:o:samsung:android:*:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:o:samsung:android:*:*:*:*:*:*:*:*range: >=11.0,<14.0
    • cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*
    • cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*
  • Samsung Mobile/knoxcustom servicellm-create
    Range: < SMR Dec-2023 Release 1
  • Samsung Mobile/mobile devicesv5
    Range: SMR Dec-2023 Release in Android 11, 12, 13, 14

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.