PT-2021-16712 · Unknown · Smart Capture

Andr + 1 · Published 2021-12-08 · Updated 2021-12-13 · CVE-2021-25522

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Smart Capture versions prior to 4.8.02.10

Description The issue allows an attacker to access a victim's captured images without permission due to insecure storage of sensitive information.

Recommendations For versions prior to 4.8.02.10, update to version 4.8.02.10 or later to resolve the issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2021-25522

Affected Products

Smart Capture

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-25522 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25522 · Vendor Advisory