CVE-2023-21422 (published 2023-02-09T00:00:00)
Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService.
Affected products: Vendor: Samsung Mobile
Product: Samsung Mobile Devices
Versions: R(11), S(12)