VULNERABILITY INTELLIGENCE

CVE-2021-25351

CVSS score3.2 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2021-03-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Description

Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.

Weakness classification

  • mobile.security@samsung.com: CWE-285
  • nvd@nist.gov: NVD-CWE-Other

Primary references