Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-21460: Samsung TV Settings Can Be Reset by Unauthorized Users

CVE-2023-21460 · published 3 years ago

Summary

A security issue in some Samsung TVs allows an attacker to reset sensitive settings without permission. This can potentially disrupt the TV's functionality and compromise user data. Update to the latest software release (SMR Mar-2023 Release 1) to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
samsung	android	11.0 12.0 13.0 `cpe:2.3:o:samsung:android:11.0:-::::::`

Original advisory text

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.

References

https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=03 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

4.4 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-287Improper Authentication

Timeline

Published16 Mar 2023

Updated26 Oct 2026

First seen11 Mar 2026

Sources

CVE-2023-21460 · OSV

CVE-2023-21460 · NVD

Track software like this

Free during beta