1. Home
  2. CVE Database
  3. CVE-2021-25525
LOW · 2.0

CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition.

Vulnerability Description

Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition.

CVSS Score

2.0

LOW

CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:L
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
SamsungPay< 4.0.65

Related Weaknesses (CWE)

CWE-754CWE-703

References

FAQ

What is CVE-2021-25525?

CVE-2021-25525 is a vulnerability with a CVSS score of 2.0 (LOW). Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition.

How severe is CVE-2021-25525?

CVE-2021-25525 has been rated LOW with a CVSS base score of 2.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-25525?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Pay.