CVE-2023-42559 : Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023

Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time.

Published 2023-12-05 03:15:16

Updated 2023-12-08 20:14:34

Source Samsung Mobile

View at NVD, CVE.org

Products affected by CVE-2023-42559

Samsung » Android
Versions from including (>=) 11.0 and before (<) 14.0
cpe:2.3:o:samsung:android:*:*:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0
cpe:2.3:o:samsung:android:14.0:-:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-apr-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-apr-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-aug-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-aug-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-dec-2022-r1
cpe:2.3:o:samsung:android:14.0:smr-dec-2022-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-feb-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-feb-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-jan-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-jan-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-jul-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-jul-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-jun-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-jun-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-mar-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-mar-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-may-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-may-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-nov-2022-r1
cpe:2.3:o:samsung:android:14.0:smr-nov-2022-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-nov-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-nov-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-oct-2022-r1
cpe:2.3:o:samsung:android:14.0:smr-oct-2022-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-oct-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-oct-2023-r1:*:*:*:*:*:*
Matching versions
Samsung » Android » Version: 14.0 Update Smr-sep-2023-r1
cpe:2.3:o:samsung:android:14.0:smr-sep-2023-r1:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2023-42559

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 13 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-42559

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.9	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N	0.7	4.2	Samsung Mobile
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: Low Availability: None
5.2	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	0.9	4.2	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: Low Availability: None

CWE ids for CVE-2023-42559

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-42559

https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12

Security Updates Firmware Updates | Samsung Mobile Security
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-42559

Products affected by CVE-2023-42559

Exploit prediction scoring system (EPSS) score for CVE-2023-42559

CVSS scores for CVE-2023-42559

CWE ids for CVE-2023-42559

References for CVE-2023-42559