First published: Thu Jul 08 2021(Updated: )
Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Tizen | <5.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-25433 has been rated as a medium severity vulnerability.
To fix CVE-2021-25433, ensure that you update your Tizen firmware to the latest version released after July 2021.
An attacker exploiting CVE-2021-25433 can perform a factory reset on the device using an untrusted application.
CVE-2021-25433 affects Tizen versions prior to 5.5, specifically in the context of the factory reset policy.
If your device is running Tizen version 5.5 or earlier, it is vulnerable to CVE-2021-25433.