Improper Authorization in Tizen Factory Reset Policy by Samsung
CVE-2021-25433

5.5MEDIUM

Key Information:

Vendor
Samsung
Status
Tizen Wearable Devices
Vendor
CVE Published:
8 July 2021

Summary

An improper authorization vulnerability exists in the factory reset policy of Samsung's Tizen operating system. This flaw allows untrusted applications to execute a factory reset command via a dbus signal. Prior to the Firmware update released in July 2021, this security oversight exposed users to potential manipulation by unauthorized applications, compromising device integrity and user data.

Affected Version(s)

Tizen wearable devices Tizen 5.5

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.