CVE-2021-25342: Medium severity samsung members vulnerability
Published Mar 4, 2021
·Updated
Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.
Affected Software
64 affected components
Samsung Members<2.4.81.13
Google Android=1.0
Google Android=1.1
Google Android=1.5
Google Android=1.6
Google Android=2.0
Google Android=2.0.1
Google Android=2.1
Google Android=2.2
Google Android=2.2-rev1
Google Android=2.2.1
Google Android=2.2.2
Google Android=2.2.3
Google Android=2.3
Google Android=2.3-rev1
Google Android=2.3.1
Google Android=2.3.2
Google Android=2.3.3
Google Android=2.3.4
Google Android=2.3.5
Google Android=2.3.6
Google Android=2.3.7
Google Android=3.0
Google Android=3.1
Google Android=3.2
Google Android=3.2.1
Google Android=3.2.2
Google Android=3.2.4
Google Android=3.2.6
Google Android=4.0
Google Android=4.0.1
Google Android=4.0.2
Google Android=4.0.3
Google Android=4.0.4
Google Android=4.1
Google Android=4.1.1
Google Android=4.1.2
Google Android=4.2
Google Android=4.2.1
Google Android=4.2.2
Google Android=4.3
Google Android=4.3.1
Google Android=4.4
Google Android=4.4.1
Google Android=4.4.2
Google Android=4.4.3
Google Android=4.4.4
Google Android=5.0
Google Android=5.0.1
Google Android=5.0.2
Google Android=5.1
Google Android=5.1.0
Google Android=5.1.1
Google Android=6.0
Google Android=6.0.1
Google Android=7.0
Google Android=7.1.0
Google Android=7.1.1
Google Android=7.1.2
Google Android=8.0
Samsung Members<3.8.00.13
Google Android=9.0
Google Android=10.0
Google Android=11.0
Event History
Mar 4, 2021
CVE Published
via MITRE·09:03 PM
Data Sourced
via MITRE·09:03 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-25342?
CVE-2021-25342 has been evaluated as a high-severity vulnerability due to its potential for unauthorized actions and denial of service attacks.
2
How do I fix CVE-2021-25342?
To mitigate CVE-2021-25342, upgrade the Samsung Members application to version 3.0.9 or later.
3
What actions can be taken by exploiting CVE-2021-25342?
Exploitation of CVE-2021-25342 allows unauthorized actions, which may lead to service disruption or denial of service.
4
Which software versions are affected by CVE-2021-25342?
CVE-2021-25342 impacts Samsung Members versions prior to 3.0.9, as well as earlier versions up to 2.4.81.13.
5
Is my device vulnerable to CVE-2021-25342?
Devices utilizing affected versions of the Samsung Members application prior to 3.0.9 may be vulnerable to CVE-2021-25342.