Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number.