5.5

CVE-2021-25431

Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer.

Data is provided by the National Vulnerability Database (NVD)
Samsung ≫ Cameralyzer Version >= 3.2.0 < 3.2.1041
   Google ≫ Android Version9.0
Samsung ≫ Cameralyzer Version >= 3.3.0 < 3.3.1040
   Google ≫ Android Version10.0
Samsung ≫ Cameralyzer Version >= 3.4.0 < 3.4.4210
   Google ≫ Android Version10.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.127
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.