CVE-2021-25351: Low severity samsung account sdk vulnerability
Published Mar 25, 2021
·Updated
Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.
Affected Software
4 affected components
samsung Account<10.7.07
Google Android=9.0
samsung Account<12.1.1.3
Google Android=10.0
Event History
Mar 25, 2021
CVE Published
via MITRE·04:10 PM
Data Sourced
via MITRE·04:10 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-25351?
CVE-2021-25351 is a vulnerability that allows physically proximate attackers to log out a user account on a Samsung device without needing the user's password.
2
What software versions are affected by CVE-2021-25351?
Samsung Account versions prior to 10.7.0.7 and 12.1.1.3 are affected by CVE-2021-25351.
3
What is the severity of CVE-2021-25351?
CVE-2021-25351 has a severity rating of low (2.4).
4
How can physically proximate attackers exploit CVE-2021-25351?
Physically proximate attackers can exploit CVE-2021-25351 to log out a user account on a Samsung device without needing the user's password.
5
Where can I find more information about CVE-2021-25351?
You can find more information about CVE-2021-25351 on the Samsung Mobile Security website.