CVE-2021-25343: Medium severity samsung members vulnerability

Q: What is the severity of CVE-2021-25343?

CVE-2021-25343 has a high severity rating due to its potential for unauthorized actions and denial of service attacks.

Q: How do I fix CVE-2021-25343?

To fix CVE-2021-25343, update the Samsung Members app to version 2.4.81.13 or later.

Q: Which versions are affected by CVE-2021-25343?

CVE-2021-25343 affects Samsung Members versions prior to 2.4.81.13 on Android O (8.1) and below, and versions before 3.8.00.13 on Android P (9.0) and above.

Q: What impact does CVE-2021-25343 have?

The impact of CVE-2021-25343 includes unauthorized access to app services and potential service disruptions.

Q: Is there a workaround for CVE-2021-25343?

There are no documented workarounds for CVE-2021-25343; the only resolution is to update the affected app.

Published Mar 4, 2021

Updated

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Affected Software

65 affected components

Samsung Members<2.4.81.13

Google Android=1.0

Google Android=1.1

Google Android=1.5

Google Android=1.6

Google Android=2.0

Google Android=2.0.1

Google Android=2.1

Google Android=2.2

Google Android=2.2-rev1

Google Android=2.2.1

Google Android=2.2.2

Google Android=2.2.3

Google Android=2.3

Google Android=2.3-rev1

Google Android=2.3.1

Google Android=2.3.2

Google Android=2.3.3

Google Android=2.3.4

Google Android=2.3.5

Google Android=2.3.6

Google Android=2.3.7

Google Android=3.0

Google Android=3.1

Google Android=3.2

Google Android=3.2.1

Google Android=3.2.2

Google Android=3.2.4

Google Android=3.2.6

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Google Android=4.3.1

Google Android=4.4

Google Android=4.4.1

Google Android=4.4.2

Google Android=4.4.3

Google Android=4.4.4

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android=7.1.2

Google Android=8.0

Google Android=8.1

Samsung Members<3.8.00.13

Google Android=9.0

Google Android=10.0

Google Android=11.0

Event History

Mar 4, 2021

CVE Published

via MITRE·09:03 PM

Data Sourced

via MITRE·09:03 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-25343?

CVE-2021-25343 has a high severity rating due to its potential for unauthorized actions and denial of service attacks.

How do I fix CVE-2021-25343?

To fix CVE-2021-25343, update the Samsung Members app to version 2.4.81.13 or later.

Which versions are affected by CVE-2021-25343?

CVE-2021-25343 affects Samsung Members versions prior to 2.4.81.13 on Android O (8.1) and below, and versions before 3.8.00.13 on Android P (9.0) and above.

What impact does CVE-2021-25343 have?

The impact of CVE-2021-25343 includes unauthorized access to app services and potential service disruptions.

Is there a workaround for CVE-2021-25343?