Unauthorized Actions in Samsung S Assistant Due to Provider Issues
CVE-2021-25341

4MEDIUM

Key Information:

Vendor
Samsung
Status
S Assistant
Vendor
CVE Published:
4 March 2021

Summary

A vulnerability exists in Samsung's S Assistant that allows unauthorized actions due to the calling of a non-existent provider. This flaw could enable attackers to hijack the provider, leading to potential denial of service attacks. Users of versions prior to 6.5.01.22 are at risk and should update to the latest version to mitigate this issue.

Affected Version(s)

S Assistant < 6.5.01.22

References

https://security.samsungmobile.com
x_refsource_MISC
https://security.samsungmobile.com/serviceWeb.smsb
x_refsource_CONFIRM

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.