The Indian government's agency the Indian Computer Emergency Response Team (CERT-In) on Friday (Dec 15) warned users of iPhone and other Apple products of multiple vulnerabilities that could allow hackers to access sensitive information.

The Indian government's agency the Indian Computer Emergency Response Team (CERT-In) on Friday (Dec 15) warned users of iPhone and other Apple products of multiple vulnerabilities that could allow hackers to access sensitive information. In its report, the CERT said, "Multiple vulnerabilities have been reported in Apple products which could allow an attacker to access sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service (DoS) conditions, bypass authentication, gain elevated privileges, and perform spoofing attacks on the targeted systems." Which Apple products have been affected? According to the CERT, the affected products include versions iOS versions prior to 17.2 and 16.7.3; iPad iOS versions prior to 17.2 and 16.7.3; macOS Sonoma versions prior to 14.2; macOS Ventura versions prior to 13.6.3; macOS Monterey versions prior to 12.7.2; tvOS versions prior to 17.2; watchOS versions prior to 10.2; and Safari versions prior to 17.2. The CERT has put up the severity rating in all these Apple products as 'High'. Some of the impacts include denial of service, security feature bypass, elevation of privileges, and spoofing attacks. The government agency also advised users of these products to apply for appropriate software updates. Centre issues warning for Samsung phones The warning for Apple products comes after the CERT released security warnings for Samsung products, specifically the Galaxy phones. "Multiple vulnerabilities have been reported in Samsung products that could allow an attacker to bypass implemented security restrictions, access sensitive information, and execute arbitrary code on the targeted system," the CERT said in its vulnerability note. The note emphasised the issues which might affect Samsung mobile phones that have been using Android versions 11 and above.

After Samsung, India now issues security warnings for users of iPhone, other Apple products

The Indian government released security warnings which specifically targeted the users of Samsung Galaxy phones. 
 
The Indian Computer Emergency Response Team (CERT-In) released a security advisory which highlighted the multiple vulnerabilities that have been impacting millions of Samsung Galaxy mobile phones, which include both older and newer models. 
 
The security alert, which was issued on December 13, categorised the concern as high-risk and emphasised the urgency of updating the operating system or firmware in the existing Samsung mobile phones. 
 
"Multiple vulnerabilities have been reported in Samsung products that could allow an attacker to bypass implemented security restrictions, access sensitive information, and execute arbitrary code on the targeted system," said CERT, in its vulnerability note. 
 
The note&nbsp;emphasised the issues which might affect Samsung mobile phones that have been using Android versions 11 and above.

Also read:&nbsp;<a href="https://www.wionews.com/india-news/truly-mobile-50-metre-high-cellular-tower-gets-stolen-665172">Truly 'mobile': 50-metre high cellular tower gets stolen</a>

“These vulnerabilities exist due to improper access control flaw in Knox Custom Manager Service and Smart Manager CN component, integer overflow vulnerability in face preprocessing library; improper authorisation verification vulnerability in AR emoji, improper exception management vulnerability in Knox Guard, various out of bounds write vulnerabilities in bootloader, HDCP in HAL, libIfaaCa and libsavsac.so components, improper size check vulnerability in softsimd, improper input validation vulnerability in Smart-Clip and implicit intent hijacking vulnerability in contacts,” read the statement.

<h2>How are these vulnerabilities affecting Samsung mobiles?</h2>

These vulnerabilities have become weak spots in the security walls of the device. If these openings are found by a cyber attacker, they can steal phone's secret code (SIM PIN), peek into private AR Emoji files, change the clock on the castle gate (Knox Guard lock), control the phone like a puppet (execute arbitrary code), steal important information (sensitive information), shout loud commands to phone (broadcast with elevated privilege), snoop around phone's files (access arbitrary files) and take over the whole phone (compromise the targeted system).

Watch:&nbsp;How intelligence in technology is reshaping our lives

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/how-intelligence-in-technology-is-reshaping-our-lives-669431/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

Samsung Mobile, meanwhile, announced that they are rolling out a maintenance release under its December 2023 security update. 
 
“Samsung Mobile is releasing a maintenance release for major flagship models as part of the monthly Security Maintenance Release (SMR) process. This SMR package includes patches from Google and Samsung,” the smartphone company said, on its website. 
 
Meanwhile, Samsung Galaxy phone users have been asked to promptly update the operating system (OS) and firmware of their device and if they fail to do so, their mobile phones can be vulnerable to potential threats from hackers.

(With inputs from agencies)

The Indian government released security warnings which specifically targeted the users of Samsung Galaxy phones. The Indian Computer Emergency Response Team (CERT-In) released a security advisory which highlighted the multiple vulnerabilities that have been impacting millions of Samsung Galaxy mobile phones, which include both older and newer models.

The Indian government released security warnings which specifically targeted the users of Samsung Galaxy phones. The Indian Computer Emergency Response Team (CERT-In) released a security advisory which highlighted the multiple vulnerabilities that have been impacting millions of Samsung Galaxy mobile phones, which include both older and newer models. The security alert, which was issued on December 13, categorised the concern as high-risk and emphasised the urgency of updating the operating system or firmware in the existing Samsung mobile phones. "Multiple vulnerabilities have been reported in Samsung products that could allow an attacker to bypass implemented security restrictions, access sensitive information, and execute arbitrary code on the targeted system," said CERT, in its vulnerability note. The note emphasised the issues which might affect Samsung mobile phones that have been using Android versions 11 and above. Also read: Truly 'mobile': 50-metre high cellular tower gets stolen “These vulnerabilities exist due to improper access control flaw in Knox Custom Manager Service and Smart Manager CN component, integer overflow vulnerability in face preprocessing library; improper authorisation verification vulnerability in AR emoji, improper exception management vulnerability in Knox Guard, various out of bounds write vulnerabilities in bootloader, HDCP in HAL, libIfaaCa and libsavsac.so components, improper size check vulnerability in softsimd, improper input validation vulnerability in Smart-Clip and implicit intent hijacking vulnerability in contacts,” read the statement. How are these vulnerabilities affecting Samsung mobiles? These vulnerabilities have become weak spots in the security walls of the device. If these openings are found by a cyber attacker, they can steal phone's secret code (SIM PIN), peek into private AR Emoji files, change the clock on the castle gate (Knox Guard lock), control the phone like a puppet (execute arbitrary code), steal important information (sensitive information), shout loud commands to phone (broadcast with elevated privilege), snoop around phone's files (access arbitrary files) and take over the whole phone (compromise the targeted system). Watch: How intelligence in technology is reshaping our lives Samsung Mobile, meanwhile, announced that they are rolling out a maintenance release under its December 2023 security update. “Samsung Mobile is releasing a maintenance release for major flagship models as part of the monthly Security Maintenance Release (SMR) process. This SMR package includes patches from Google and Samsung,” the smartphone company said, on its website. Meanwhile, Samsung Galaxy phone users have been asked to promptly update the operating system (OS) and firmware of their device and if they fail to do so, their mobile phones can be vulnerable to potential threats from hackers. (With inputs from agencies)

Indian govt issues security warnings for Samsung mobiles. Here's all you need to know

security-warnings

Security Warnings, News on Security Warnings, stories on Security Warnings, articles on Security Warnings, Security Warnings stories at Wion, Security Warnings news, Security Warnings latest news