CVEs-PoC/2021/CVE-2021-25442.md

### [CVE-2021-25442](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25442)
![](https://img.shields.io/static/v1?label=Product&message=Knox%20Mobile%20Enrollment&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=-%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-269%3A%20Improper%20Privilege%20Management&color=brightgreen)

### Description

Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication.

### POC

#### Reference
- https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7

#### Github
No PoCs found on GitHub currently.