CVE-2021-25351: Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user…

PriorityP48low2.4CVSS 3.1

AVPACLPRNUINSUCNILAN

EPSS

0.29%

20.7th percentile

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
samsung	account	< 10.7.07	10.7.07
samsung	account	< 12.1.1.3	12.1.1.3
samsung_mobile	samsung_account	>= Android P(9.0) and below < 10.7.07	10.7.07
samsung_mobile	samsung_account	>= Android Q(10.0) < 12.1.1.3	12.1.1.3

CVSS provenance

nvdv3.12.4LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.