← Database

CVE-2023-21422

MEDIUM CVSS: 5.7 Published: 2023-02-09 Modified: 2026-06-17

Description

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService.

Affected Platforms

Samsung Android

Weakness Type

CWE-285, CWE-863

References