CVE-2021-25404

2021-06-1114:45:23

CWE-922

Samsung Mobile

www.cve.org

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.

CNA Affected

[
  {
    "product": "SmartThings",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "1.7.64.21",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5