CVE-2021-25424
Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take over the user's bluetooth device without user awareness.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - mobile.security@samsung.com
- Published
- 2021-06-11
- Last modified
- 2024-08-03
- Weaknesses
- CWE-287
Affected products
- Galaxy Watch 3 Firmware (Samsung)
- Galaxy Watch Active 2 Firmware (Samsung)
- Galaxy Watch Active Firmware (Samsung)
- Galaxy Watch Firmware (Samsung)
- Gear 2 Firmware (Samsung)
- Gear 2 Neo Firmware (Samsung)
- Gear S2 Firmware (Samsung)
- Gear S3 Firmware (Samsung)
- Gear S Firmware (Samsung)
- Tizen Wearable Devices (Samsung Mobile)
References
- https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=6
