Lucene search

K
cvelistSamsung MobileCVELIST:CVE-2021-25436
HistoryJul 08, 2021 - 1:47 p.m.

CVE-2021-25436

2021-07-0813:47:05
CWE-20
Samsung Mobile
www.cve.org
6
tizen fota vulnerability
input validation
arbitrary code execution
samsung accessory protocol

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

73.9%

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol.

CNA Affected

[
  {
    "product": "Tizen wearable devices",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "Firmware update JUL-2021 Release",
        "status": "affected",
        "version": "Tizen 5.5",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

73.9%

Related for CVELIST:CVE-2021-25436