First published: Wed Dec 08 2021(Updated: )
Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID.
Credit: mobile.security@samsung.com
Affected Software | Affected Version | How to fix |
---|---|---|
Samsung Dialer | <12.7.05.24 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-25523 is related to the insecure storage of device information in Samsung Dialer.
The severity of CVE-2021-25523 is medium, with a CVSS score of 3.3.
CVE-2021-25523 allows an attacker to access the Samsung Account ID due to insecure storage of device information in Samsung Dialer.
To fix CVE-2021-25523, update Samsung Dialer to version 12.7.05.24 or newer to address the insecure storage vulnerability.