CVE-2021-25392

Katalog CVE

CVSS 5.5 · Medium EPSS 0,10%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada google android. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path.

Rincian

Terbit di NVD

11 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-326: Inadequate Encryption Strength

EPSS (30 hari)

0,10% peluang dieksploitasi; lebih tinggi dari 0,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5 advisory vendor
• https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/ exploit · advisory pihak ketiga