---
id: 4567
title: "Abusing Samsung KNOX to remotely install a malicious application: story of a half patched vulnerability"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/abusing-samsung-knox-to-remotely-install-a-malicious-application-story-of-a-half-patched-vulnerability.html"
published_at: "2014-11-10T23:00:00Z"
tags: ["android", "mobile-security", "exploit", "vulnerability", "samsung", "knox"]
phying_url: "https://phying.com/item/4567"
lang: en
---

# Abusing Samsung KNOX to remotely install a malicious application: story of a half patched vulnerability

## Summary

Story of a half-patched Samsung KNOX flaw: an insecure update mechanism in the UniversalMDMClient app let remote attackers install an arbitrary app; S4, S4 mini, Note 3 and Ace 4 stayed vulnerable.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2014-11-10T23:00:00Z
- **Original:** https://blog.quarkslab.com/abusing-samsung-knox-to-remotely-install-a-malicious-application-story-of-a-half-patched-vulnerability.html
- **Phying News:** https://phying.com/item/4567