CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions

Medium · published September 3, 2025

CVSS v3.1
5.9
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Published
2025-09-03T06:05Z
EPSS history
Timeline
  • 03 SEP 06:05Z
    Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions
    cvelistv5