Improper Authentication Vulnerability in Tizen Bluetooth Framework by Samsung
CVE-2021-25424

8.8HIGH

Key Information:

Vendor

Samsung
Status
Tizen Wearable Devices
Vendor
CVE Published:
11 June 2021

What is CVE-2021-25424?

An improper authentication vulnerability exists in the Tizen Bluetooth framework that can allow an attacker to take control of the user's Bluetooth device without their knowledge. Exploitation of this flaw can lead to unauthorized access and potential abuse of the device's functionalities by malicious actors.

Affected Version(s)

Tizen wearable devices 5.5

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.