Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-25431

Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer.

Published

2021-07-08T14:15:08.457

Last Modified

2024-11-21T05:54:58.480

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-284
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application samsung cameralyzer < 3.2.1041 Yes
Operating System google android 9.0 No
Application samsung cameralyzer < 3.3.1040 Yes
Application samsung cameralyzer < 3.4.4210 Yes
Operating System google android 10.0 No
References