CVE-2016-1920: Medium severity Samsung KNOX vulnerability
Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1920?
CVE-2016-1920 is considered a high severity vulnerability due to the potential for man-in-the-middle attacks.
How does CVE-2016-1920 affect Samsung KNOX?
CVE-2016-1920 affects Samsung KNOX by allowing local users to exploit a shared certificate to intercept sensitive information.
What should users of Samsung KNOX 1.0 do about CVE-2016-1920?
Users of Samsung KNOX 1.0 should update to a patched version if available and avoid using untrusted VPN services.
Can CVE-2016-1920 be exploited remotely?
CVE-2016-1920 requires local access to the device, making it not directly exploitable remotely.
What types of attacks are possible due to CVE-2016-1920?
CVE-2016-1920 enables local users to conduct man-in-the-middle attacks, compromising the security of data transmissions.