EUVD-2021-12270

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Improper authorization in Samsung Members allows attacker access to user data on specific Android versions.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2021-25374	5 Jul 202204:33	–	circl
CNNVD	SAMSUNG Mobile devices 安全漏洞	9 Apr 202100:00	–	cnnvd
CVE	CVE-2021-25374	9 Apr 202117:38	–	cve
Cvelist	CVE-2021-25374	9 Apr 202117:38	–	cvelist
NVD	CVE-2021-25374	9 Apr 202118:15	–	nvd
Prion	Authorization	9 Apr 202118:15	–	prion
RedhatCVE	CVE-2021-25374	22 May 202521:37	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "72acc41f-12e5-3ea6-90cc-a560000303e8",
        "vendor": {
          "name": "Samsung Mobile"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1dd3ae3a-2c0f-374a-a175-2e6834ea838b",
        "product": {
          "name": "Samsung Members"
        },
        "product_version": "Android O(8.x) and below <2.4.83.9"
      },
      {
        "id": "c1a16530-cce9-389f-93ca-1638b2a0b094",
        "product": {
          "name": "Samsung Members"
        },
        "product_version": "Android P(9.0) and above <3.9.00.9"
      }
    ]
  }
]

Source	Link
security	www.security.samsungmobile.com/
security	www.security.samsungmobile.com/serviceWeb.smsb
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5 - 8.6

CVSS 25

EPSS0.07641