CVE-2021-25410CWE-20

Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated…

published June 11, 2021

CVSS
—
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated privilege.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00169 · 5.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-06-11T14:33Z
EPSS history
Timeline
  • 11 JUN 14:33Z
    Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated…
    cvelistv5