CVE-2021-25369Samsung Mobile Devices Improper Access Control Vulnerability

An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

6.2 MEDIUMEPSS 1.07%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Last updated: 2026-06-17 03:41 UTC

OverviewCVSS details

6.2MEDIUMCVSS 3.1

Samsung Mobile Devices (Samsung Mobile)

1.07%chance of exploitation in 30 days

Higher than 65.26% of CVEs

6.2Medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5.5Medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

2.1Low

AV:L/AC:L/Au:N/C:P/I:N/A:N

Overview

Score	Severity	Version	Vector String
6.2	MEDIUM	3.1Samsung Mobile (CNA)	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5.5	MEDIUM	3.1NVD	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2.1	LOW	2.0NVD	AV:L/AC:L/Au:N/C:P/I:N/A:N

⚡ Known exploited · remediation due Nov 29, 2022

Apply updates per vendor instructions.

CVE ID: CVE-2021-25369
Status: Analyzed
Assigner (CNA): Samsung Mobile
Published: Mar 26, 2021
Last modified: 2026-06-17 03:41 UTC
Weaknesses: CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:12 UTC.