PT-2021-16622 · Unknown · Cameralyzer

Yaoguang Chen · Published 2021-07-08 · Updated 2022-07-14 · CVE-2021-25431

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Cameralyzer versions prior to 3.2.1041 in 3.2.x Cameralyzer versions prior to 3.3.1040 in 3.3.x Cameralyzer versions prior to 3.4.4210 in 3.4.x

Description: The issue is related to improper access control in Cameralyzer, allowing untrusted applications to access certain functions.

Recommendations: For versions prior to 3.2.1041 in 3.2.x, update to version 3.2.1041 or later. For versions prior to 3.3.1040 in 3.3.x, update to version 3.3.1040 or later. For versions prior to 3.4.4210 in 3.4.x, update to version 3.4.4210 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2021-25431

Affected Products

Cameralyzer

References · 4

• https://osv.dev/vulnerability/CVE-2021-25431 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25431 · Security Note
• https://t.me/cvenotify/17467 · Telegram Post