Samsung Knox vulnerabilities

4 CVEs affecting Samsung Knox, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6744, published 2020-02-10.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-3996, published 2017-01-27. Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days. ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a crafted application.
• CVE-2016-1919, published 2017-01-27. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.
• CVE-2016-1920, published 2017-01-27. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service.
• CVE-2019-6744, published 2020-02-10. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. This vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung Galaxy S9 build G9600ZHS3ARL1 Secure Folder. An attacker…