Improper access control

2022-07-1214:15:00

PRIOn knowledge base

www.prio-n.com

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSleep method which is protected by system permission by sending braodcast intent.

CPENameOperatorVersion
androideq10.0
androideq11.0
androideq12.0

Name	Operator	Version
android	eq	10.0
android	eq	11.0
android	eq	12.0

References

security.samsungmobile.com/securityUpdate.smsb?year=2022&month=7