Anyoone, who has physical access to the device and prepared with a sim ejector tool and a sim card with known puk can bypass the lock screen.
This is a critical security bug.
The bug is fixed in the November security patch, when will the fix released?
