CVE-2021-25527CWE-926

Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and…

Low · published December 8, 2021

CVSS v3.1
3.8
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-926 · Improper Export of Android Application Components
Published
2021-12-08T14:20Z
EPSS history
Timeline
  • 08 DEC 14:20Z
    Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and…
    cvelistv5