Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.
CWE-287, CWE-287