Lucene search

K
cvelistSamsung MobileCVELIST:CVE-2021-25437
HistoryJul 08, 2021 - 1:47 p.m.

CVE-2021-25437

2021-07-0813:47:11
CWE-20
Samsung Mobile
www.cve.org
6
tizen fota access control code execution update file

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

76.0%

Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.

CNA Affected

[
  {
    "product": "Tizen wearable devices",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "Firmware update JUL-2021 Release",
        "status": "affected",
        "version": "Tizen 5.5",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

9.8

Confidence

High

EPSS

0.005

Percentile

76.0%

Related for CVELIST:CVE-2021-25437