CVE-2021-25409
11.06.2021, 15:15
Improper access in Notification setting prior to SMR JUN-2021 Release 1 allows physically proximate attackers to set arbitrary notification via physically configuring device.Enginsight
| Vendor | Product | Version |
|---|---|---|
| android | 10.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-703 - Improper Check or Handling of Exceptional ConditionsThe software does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the software.
- CWE-862 - Missing AuthorizationThe software does not perform an authorization check when an actor attempts to access a resource or perform an action.