PT-2025-20042 · Unknown · Smart Manager

开元米粉实力代购 · Published 2025-05-07 · Updated 2025-05-12 · CVE-2025-20957

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SmartManagerCN versions prior to SMR May-2025 Release 1

Description The issue is related to improper access control in SmartManagerCN, which allows local attackers to launch arbitrary activities with SmartManagerCN privilege. This can be exploited by attackers to gain unauthorized access and perform malicious actions.

Recommendations For versions prior to SMR May-2025 Release 1, update to SMR May-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive features and functionalities within SmartManagerCN to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2025-20957

Affected Products

Smart Manager

References · 8

• https://osv.dev/vulnerability/CVE-2025-20957 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=05 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20957 · Security Note
• https://twitter.com/cracbot/status/1921883141243064397 · Twitter Post
• https://twitter.com/cybercronai/status/1920147313558691922 · Twitter Post
• https://twitter.com/CVEnew/status/1920038113126072668 · Twitter Post
• https://t.me/cvenotify/121166 · Telegram Post
• https://twitter.com/cybercronai/status/1920135423323513202 · Twitter Post