Vulnerability Description
Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission.
CVSS Score
3.7
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Notes | < 4.2.00.22 |
Related Weaknesses (CWE)
References
- https://security.samsungmobile.com/Vendor Advisory
- https://security.samsungmobile.com/serviceWeb.smsbVendor Advisory
- https://security.samsungmobile.com/Vendor Advisory
- https://security.samsungmobile.com/serviceWeb.smsbVendor Advisory
FAQ
What is CVE-2021-25367?
CVE-2021-25367 is a vulnerability with a CVSS score of 3.7 (LOW). Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission.
How severe is CVE-2021-25367?
CVE-2021-25367 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-25367?
Check the references section above for vendor advisories and patch information. Affected products include: Samsung Notes.