CVE-2017-10963
MEDIUMSamsung Knox SDS IAM and EMM 16.11 - Unauthenticated Application Installation via Man-in-the-Middle Update Injection
Title source: llmDescription
In Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on Samsung mobile devices, a man-in-the-middle attacker can install any application into the Knox container (without the user's knowledge) by inspecting network traffic from a Samsung server and injecting content at a certain point in the update sequence. This installed application can further leak information stored inside the Knox container to the outside world.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://gist.github.com/e96e02/12ce905e3b724954273dd7d543a968f1
Third Party Advisory x_refsource_misc
https://www.lgsinnovations.com/lgs-innovations-discovers-samsung-mobile-product-security-vulnerability/
Scores
CVSS v3
5.9
EPSS
0.0026
EPSS Percentile
49.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-74
Status
published
Products (2)
samsung/knox_enterprise_mobility_management
16.11
samsung/knox_identity_access_management
16.11
Published
Feb 20, 2018
Tracked Since
Feb 18, 2026