CVE-2021-25388 — Improper Export of Android Application Components in Mobile Devices

CWE-926 — Improper Export of Android Application Components CWE-354 — Improper Validation of Integrity Check Value3 documents3 sources

Severity

7.1HIGHNVD

EPSS

0.0%

top 99.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Mobile Devices Google Android

Timeline

PublishedJun 11

Latest updateMay 24

Description

Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 1.8 | Impact: 5.2

Affected Packages2 packages

▶CVEListV5samsung_mobile/samsung_mobile_devicesR(11.0) — SMR MAY-2021 Release 1

▶NVDgoogle/android11.0

🔴Vulnerability Details

GHSA

GHSA-949w-8pph-6gmh: Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app↗2022-05-24

▶

CVEList

CVE-2021-25388: Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app↗2021-06-11

▶