CVE-2021-25366 - Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication

Back Back to CVE browser

LOW

Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication

Published Mar 25, 2021

3.2

LOW

CVSS 3.1

EPSS 0.27%

Description

Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication.

Affected products

Vendor Samsung Mobile Product Samsung Internet Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <13.2.1.70

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Samsung Mobile

Samsung Internet

n/a

Version	Status	Constraints
unspecified	affected	<13.2.1.70

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-703

References (2)

https://security.samsungmobile.com/
x_refsource_MISCVendor Advisory
https://security.samsungmobile.com/serviceWeb.smsb
x_refsource_CONFIRMNot ApplicableVendor Advisory

Link	Providers	Tags
https://security.samsungmobile.com/		x_refsource_MISCVendor Advisory
https://security.samsungmobile.com/serviceWeb.smsb		x_refsource_CONFIRMNot ApplicableVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Samsung Mobile

Published Mar 25, 2021

Updated Aug 3, 2024

Reserved Jan 19, 2021

Link CVE-2021-25366

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-25366

Red Hat

Severity n/a

Public date n/a

Links CVE-2021-25366