Hijacking Vulnerability in Samsung Cloud Affecting Samsung Devices
CVE-2021-25368

3.3LOW

Key Information:

Vendor

Samsung
Status
Samsung Cloud
Vendor
CVE Published:
25 March 2021

What is CVE-2021-25368?

A hijacking vulnerability exists in Samsung Cloud before version 4.7.0.3 that could allow attackers to intercept processes during execution. This could lead to unauthorized access and manipulation of sensitive user data, posing significant risks for users relying on Samsung Cloud services.

Affected Version(s)

Samsung Cloud < 4.7.0.3

References

https://security.samsungmobile.com/
x_refsource_MISC
https://security.samsungmobile.com/serviceWeb.smsb
x_refsource_CONFIRM

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2021-25368 : Hijacking Vulnerability in Samsung Cloud Affecting Samsung Devices