CVE-2023-21461

Summary

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesAndroid 12, 13 < SMR Mar-2023 Release 1affected

Weaknesses

  • CWE-285: CWE-285 Improper Authorization

ADP Enrichment

CVE Program Container

Additional References

References