Vulnerability Description
An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote attackers to access a user data related with Samsung Account.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Members | <= 2.4.83.9 |
| Android | 8.1 |
Related Weaknesses (CWE)
References
- https://security.samsungmobile.com/Vendor Advisory
- https://security.samsungmobile.com/serviceWeb.smsbVendor Advisory
- https://security.samsungmobile.com/Vendor Advisory
- https://security.samsungmobile.com/serviceWeb.smsbVendor Advisory
FAQ
What is CVE-2021-25374?
CVE-2021-25374 is a vulnerability with a CVSS score of 8.6 (HIGH). An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote...
How severe is CVE-2021-25374?
CVE-2021-25374 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-25374?
Check the references section above for vendor advisories and patch information. Affected products include: Samsung Members, Google Android.