CVE-2021-25377

LOW

3.3

Descripcion

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action.

Detalles CVE

Puntuacion CVSS v3.13.3

SeveridadLOW

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado4/9/2021

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

google:androidsamsung:experience_service

Debilidades (CWE)

CWE-287CWE-269

Referencias

https://security.samsungmobile.com/(mobile.security@samsung.com)

https://security.samsungmobile.com/serviceWeb.smsb(mobile.security@samsung.com)

https://security.samsungmobile.com/(af854a3a-2127-422b-91ae-364da2661108)

https://security.samsungmobile.com/serviceWeb.smsb(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.