Lucene search

[email protected]CVE-2021-25431

HistoryJul 08, 2021 - 2:15 p.m.

CVE-2021-25431

2021-07-0814:15:08

CWE-284

[email protected]

web.nvd.nist.gov

cve-2021-25431

cameralyzer

access control

vulnerability

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer.

Affected configurations

NVD

Node

samsungcameralyzerRange3.2.0–3.2.1041

AND

googleandroidMatch9.0

Node

samsungcameralyzerRange3.3.0–3.3.1040

samsungcameralyzerRange3.4.0–3.4.4210

AND

googleandroidMatch10.0

CPENameOperatorVersion
samsung:cameralyzersamsung cameralyzerlt3.2.1041

CPE	Name	Operator	Version
samsung:cameralyzer	samsung cameralyzer	lt	3.2.1041

CNA Affected

[
  {
    "product": "Cameralyzer",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x",
        "status": "affected",
        "version": "-",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7

Social References

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-25431

cvelist1 nvd1 prion1