Lucene search
Samsung MobileCVELIST:CVE-2021-25369HistoryMar 26, 2021 - 6:22 p.m.
CVE-2021-25369
2021-03-2618:22:48
CWE-200
Samsung Mobile
www.cve.org
7
access control
sec_log file
smr mar-2021
sensitive information
userspace
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
45.9%
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
CNA Affected
[
{
"product": "Samsung Mobile Devices",
"vendor": "Samsung Mobile",
"versions": [
{
"lessThan": "SMR Mar-2021 Release 1",
"status": "affected",
"version": "O(8.x), P(9.0), Q(10.0)",
"versionType": "custom"
}
]
}
]Related
prion
prion
Improper access control
2021-03-26 19:15:00
attackerkb
attackerkb
CVE-2021-25369
2021-03-26 00:00:00
cve
cve
CVE-2021-25369
2021-03-26 19:15:12
nvd
nvd
CVE-2021-25369
2021-03-26 19:15:12
cisa_kev
cisa_kev
Samsung Mobile Devices Improper Access Control Vulnerability
2022-11-08 00:00:00
Samsung Mobile Devices Memory Corruption Vulnerability
2022-11-08 00:00:00
Samsung Mobile Devices Improper Access Control Vulnerability
2022-11-08 00:00:00
googleprojectzero
googleprojectzero
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
2022-11-04 00:00:00
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
45.9%
Related for CVELIST:CVE-2021-25369