← CVE Radar
CVE-2021-25337Samsung Mobile Devices Improper Access Control Vulnerability
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.
7.1 HIGHEPSS 2.80%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.1 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N |
| 4.4 | MEDIUM | 3.1Samsung Mobile (CNA) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
| 5.8 | MEDIUM | 2.0NVD | AV:N/AC:M/Au:N/C:P/I:P/A:N |
CISA required action
⚡ Known exploited · remediation due Nov 29, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2021-25337
- Status
- Analyzed
- Assigner (CNA)
- Samsung Mobile
- Published
- Mar 4, 2021
- Last modified
- 2026-06-17 03:41 UTC
- Weaknesses
- CWE-269 · Improper Privilege Management
Affected Products
As published by the CNA in the CVE record.
Samsung MobileSamsung Mobile Devices1 version range
- Selected P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1