CVE-2021-25382

An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.1 MEDIUM
PHYSICAL
LOW
HIGH
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Samsung MobileCNA
6.1 MEDIUM
PHYSICAL
LOW
HIGH
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
VendorProductVersion
googleandroid
8.0
googleandroid
8.1
googleandroid
9.0
googleandroid
10.0
googleandroid
11.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.samsungmobile.com/securityUpdate.smsb?year=2020&month=10
https://security.samsungmobile.com/securityUpdate.smsb?year=2020&month=10