Lucene search

MitreCVE-2021-30162

HistoryApr 06, 2021 - 8:15 a.m.

CVE-2021-30162

2021-04-0608:15:12

mitre

web.nvd.nist.gov

mobile devices

android os

access control bypass

isms services

security vulnerability

cve-2021-30162

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

Percentile

12.6%

JSON

An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS services to bypass access control on specific content providers. The LG ID is LVE-SMP-210003 (April 2021).

Affected configurations

Nvd

Node

googleandroidMatch4.4

googleandroidMatch4.4.1

googleandroidMatch4.4.2

googleandroidMatch4.4.3

googleandroidMatch4.4.4

googleandroidMatch5.0

googleandroidMatch5.0.1

googleandroidMatch5.0.2

googleandroidMatch5.1

googleandroidMatch5.1.0

googleandroidMatch5.1.1

googleandroidMatch6.0

googleandroidMatch6.0.1

googleandroidMatch7.0

googleandroidMatch7.1.0

googleandroidMatch7.1.1

googleandroidMatch7.1.2

googleandroidMatch8.0

googleandroidMatch8.1

googleandroidMatch9.0

googleandroidMatch10.0

googleandroidMatch11.0

VendorProductVersionCPE
googleandroid4.4cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*
googleandroid4.4.1cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*
googleandroid4.4.2cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*
googleandroid4.4.3cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*
googleandroid4.4.4cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*
googleandroid5.0cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*
googleandroid5.0.1cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*
googleandroid5.0.2cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*
googleandroid5.1cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*
googleandroid5.1.0cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	android	4.4	cpe:2.3:o:google:android:4.4:::::::*
google	android	4.4.1	cpe:2.3:o:google:android:4.4.1:::::::*
google	android	4.4.2	cpe:2.3:o:google:android:4.4.2:::::::*
google	android	4.4.3	cpe:2.3:o:google:android:4.4.3:::::::*
google	android	4.4.4	cpe:2.3:o:google:android:4.4.4:::::::*
google	android	5.0	cpe:2.3:o:google:android:5.0:::::::*
google	android	5.0.1	cpe:2.3:o:google:android:5.0.1:::::::*
google	android	5.0.2	cpe:2.3:o:google:android:5.0.2:::::::*
google	android	5.1	cpe:2.3:o:google:android:5.1:::::::*
google	android	5.1.0	cpe:2.3:o:google:android:5.1.0:::::::*

Rows per page:

1-10 of 221

References

lgsecurity.lge.com/

Social References

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-30162