CVE-2021-25437

Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.

Score

CVSS 3.1 9.8 Critical

Status

Modified - mobile.security@samsung.com

Published

2021-07-08

Last modified

2024-08-03

Weaknesses

CWE-20

Affected products

• Tizen (Linux)
• Tizen Wearable Devices (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7