CVE-2021-25369

MEDIUM KEV

sec_log <SMR MAR-2021 Release 1 - Info Disclosure

Title source: llm

Description

An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

References (3)

Scores

CVSS v3 6.2
EPSS 0.0021
EPSS Percentile 43.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CISA KEV 2022-11-08
VulnCheck KEV 2020-12-10
InTheWild.io 2020-12-10
ENISA EUVD EUVD-2021-12265
CWE
CWE-200
Status published
Products (4)
samsung/android 8.0
samsung/android 8.1
samsung/android 9.0 smr-apr-2019-r1 (29 CPE variants)
samsung/android 10.0 smr-apr-2020-r1 (16 CPE variants)
Published Mar 26, 2021
KEV Added Nov 08, 2022
Tracked Since Feb 18, 2026