Lucene search

K
cvelistSamsung MobileCVELIST:CVE-2021-25367
HistoryMar 25, 2021 - 4:14 p.m.

CVE-2021-25367

2021-03-2516:14:52
CWE-22
Samsung Mobile
www.cve.org
5
samsung notes
path traversal
vulnerability
local files access
permission

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

19.4%

Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission.

CNA Affected

[
  {
    "product": "Samsung Notes",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "4.2.00.22",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

19.4%

Related for CVELIST:CVE-2021-25367