CVE-2021-25506CWE-287

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service

Medium · published November 5, 2021

CVSS v3.1
4.0
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-11-05T02:03Z
EPSS history
Timeline
  • 05 NOV 02:03Z
    Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service
    cvelistv5