CVE-2021-25466: Medium severity samsung internet browser vulnerability
Published Sep 9, 2021
·Updated
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.
Affected Software
1 affected component
Samsung Internet<15.0.2.47
Event History
Sep 9, 2021
CVE Published
via MITRE·06:05 PM
Data Sourced
via MITRE·06:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-25466?
CVE-2021-25466 is an improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47.
2
How does CVE-2021-25466 affect Samsung Internet?
CVE-2021-25466 allows attackers to perform man-in-the-middle attacks and obtain Samsung Account tokens.
3
What is the severity of CVE-2021-25466?
The severity of CVE-2021-25466 is medium with a CVSS score of 5.9.
4
How can I fix CVE-2021-25466?
To fix CVE-2021-25466, update Samsung Internet to version 15.0.2.47 or later.
5
Where can I find more information about CVE-2021-25466?
More information about CVE-2021-25466 can be found at https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=9