CVE-2021-25348

EUVD-2021-12244
Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 LOW
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Samsung MobileCNA
2.1 LOW
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Affected Products (NVD)
VendorProductVersion
samsunginternet
𝑥
< 13.0.1.60
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb
https://security.samsungmobile.com/
https://security.samsungmobile.com/serviceWeb.smsb