Actively exploited · Published Mar 4, 2021 · Assigned by Samsung Mobile

CVE-2021-25337

Medium 4.4 Exploited

In plain English

A medium-severity privilege mismanagement in Samsung Mobile Devices from Samsung Mobile. Attackers are actively exploiting it in the wild (listed by CISA on November 8, 2022). The chance it is exploited in the next 30 days is estimated at 2.8% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)4.4Medium

Exploit odds (30 days)2.8%top 13.4% of all CVEs

Exploited in the wildYesCISA KEV since Nov 8, 2022

Attack tooling1Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Nov 29, 2022.

Official description

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.

Affected products (as reported)

Vendor	Product	Versions
Samsung Mobile	Samsung Mobile Devices	Selected P(9.0), Q(10.0), R(11.0) – before SMR Mar-2021 Release 1

Weakness: CWE-269 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

References

https://security.samsungmobile.com/securityUpdate.smsb x_refsource_CONFIRM
https://security.samsungmobile.com x_refsource_MISC
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25337 government-resource