60 matches found
CVE-2023-21474
Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege...
CVE-2023-21474
Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege...
PT-2025-35677
Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Apr-2022 Release 1 Description: An intent redirection issue exists in SecSettings that allows attackers to access arbitrary files with system privileges. Recommendations: Update SecSettings to SMR Apr-2022...
CVE-2023-42530
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...
CVE-2023-21460
Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...
CVE-2021-25393
Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data...
CVE-2023-42530
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...
CVE-2023-42530
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...
Improper access control
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...
CVE-2023-42530
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...
CVE-2023-42530
CVE-2023-42530 affects Samsung Mobile SecSettings prior to SMR Nov-2023 Release 1. The vulnerability is an improper access control that allows enabling Wi‑Fi and Wi‑Fi Direct without user interaction. Reported impact includes potential high integrity impact (I:H) and high confidentiality/availabi...
CVE-2023-42530
Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2023 Release 1, which stems from an improper access control vulnerability in the SecSettings module. An...
CVE-2023-30727
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
Improper access control
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
CVE-2023-30727
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
CVE-2023-30727
CVE-2023-30727 describes an improper access control vulnerability in Samsung SecSettings prior to SMR Oct-2023 Release 1. The issue allows an attacker to enable Wi‑Fi and connect to arbitrary networks without user interaction, affecting SecSettings components on affected Samsung mobile devices. T...
CVE-2023-30727
Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction...
PT-2023-22929 · Unknown · Secsettings
Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Oct-2023 Release 1 Description: The issue is related to an improper access control vulnerability. This vulnerability allows attackers to enable Wi-Fi and connect to arbitrary Wi-Fi networks without any user...
Authentication flaw
Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status...