Vulnerability Details CVE-2021-25424
Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take over the user's bluetooth device without user awareness.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 5.8
References
Products affected by CVE-2021-25424
-
cpe:2.3:h:samsung:galaxy_watch:-
-
cpe:2.3:h:samsung:galaxy_watch_3:-
-
cpe:2.3:h:samsung:galaxy_watch_active:-
-
cpe:2.3:h:samsung:galaxy_watch_active_2:-
-
cpe:2.3:h:samsung:gear_2:-
-
cpe:2.3:h:samsung:gear_2_neo:-
-
cpe:2.3:h:samsung:gear_s2:-
-
cpe:2.3:h:samsung:gear_s3:-
-
cpe:2.3:h:samsung:gear_s:-
-
cpe:2.3:o:samsung:galaxy_watch_3_firmware:-
-
cpe:2.3:o:samsung:galaxy_watch_active_2_firmware:-
-
cpe:2.3:o:samsung:galaxy_watch_active_firmware:-
-
cpe:2.3:o:samsung:galaxy_watch_firmware:-
-
cpe:2.3:o:samsung:gear_2_firmware:-
-
cpe:2.3:o:samsung:gear_2_neo_firmware:-
-
cpe:2.3:o:samsung:gear_s2_firmware:-
-
cpe:2.3:o:samsung:gear_s3_firmware:-
-
cpe:2.3:o:samsung:gear_s_firmware:-