VULNERABILITY INTELLIGENCE

CVE-2021-25525

CVSS score2 LOW
EPSS probability0.34%
CISA KEVNot currently listed
Published2021-12-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:L

Description

Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition.

Weakness classification

  • mobile.security@samsung.com: CWE-703
  • nvd@nist.gov: CWE-754

Primary references