CVE-2021-25377CWE-287

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute…

Low · published April 9, 2021

CVSS v3.1
3.3
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-04-09T17:39Z
EPSS history
Timeline
  • 09 APR 17:39Z
    Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute…
    cvelistv5