CVE-2021-25471CWE-20

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection…

Low · published October 6, 2021

CVSS v3.1
3.7
EPSS
0%
Percentile
32.9
In the wild
Unconfirmed
What it is

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-10-06T17:08Z
EPSS history
Timeline
  • 06 OCT 17:08Z
    A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection…
    cvelistv5