Summaryinfo

A vulnerability classified as critical has been found in Samsung Smart Phone. This affects the function AutoPowerOnOffConfirmDialog of the component Settings. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2023-21461. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Detailsinfo

A vulnerability was found in Samsung Smart Phone (Smartphone Operating System) (affected version unknown). It has been rated as problematic. Affected by this issue is the function AutoPowerOnOffConfirmDialog of the component Settings. The manipulation with an unknown input leads to a improper authorization vulnerability. Using CWE to declare the problem leads to CWE-285. The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. Impacted is availability. CVE summarizes:

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity.

The weakness was published 03/17/2023. The advisory is shared for download at security.samsungmobile.com. This vulnerability is handled as CVE-2023-21461 since 11/14/2022. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1548.002.

Upgrading eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Smartphone Operating System

Vendor

• Samsung

Name

• Smart Phone

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion