6.2Orta
KEV
CVE-2021-25369Samsung Mobile Devices Improper Access Control Vulnerability
Aktif olarak istismar ediliyor — Samsung Mobile Devices Improper Access Control Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 08.11.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 29.11.2022.
Gerekli işlem: Apply updates per vendor instructions. https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25369
Açıklama
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
Zayıflık türü (CWE):
CWE-200
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| samsung | android | 8.0 | |
| Samsung Mobile | Samsung Mobile Devices | O(8.x), P(9.0), Q(10.0) – < SMR Mar-2021 Release 1 |
Kaynaklar ve yamalar
- https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory
- https://security.samsungmobile.com Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25369 US Government Resource
CPE eşleşmeleri (NVD) (47)
cpe:2.3:o:samsung:android:8.0:-:*:*:*:*:*:*cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-apr-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-apr-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-aug-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-aug-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-dec-2018-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-dec-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-dec-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-feb-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-feb-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jan-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jan-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jul-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jul-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jun-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-jun-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-mar-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-mar-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-may-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-may-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-nov-2018-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-nov-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-nov-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-oct-2018-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-oct-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-oct-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-sep-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:9.0:smr-sep-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*