Details of VAR-202112-0528

ID

VAR-202112-0528

CVE

CVE-2021-25514

TITLE

Android Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2021-016089

DESCRIPTION

An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information. Android Exists in unspecified vulnerabilities.Information may be obtained. Samsung Tags is a tagging feature for Samsung mobile devices. An attacker can exploit this vulnerability to access sensitive information

Trust: 2.16

sources: NVD: CVE-2021-25514 // JVNDB: JVNDB-2021-016089 // CNVD: CNVD-2025-02719

IOT TAXONOMY

category:

['IoT']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2025-02719

AFFECTED PRODUCTS

vendor:	google	model:	android	scope:	eq	version:	10.0	Trust: 1.0
vendor:	google	model:	android	scope:	eq	version:	11.0	Trust: 1.0
vendor:	google	model:	android	scope:	eq	version:	-	Trust: 0.8
vendor:	google	model:	android	scope:	-	version:	-	Trust: 0.8
vendor:	samsung	model:	mobile devices q	scope:	-	version:	-	Trust: 0.6
vendor:	samsung	model:	mobile devices r	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2025-02719 // JVNDB: JVNDB-2021-016089 // NVD: CVE-2021-25514

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-25514
value:	MEDIUM
Trust: 1.0
mobile.security@samsung.com:	CVE-2021-25514
value:	LOW
Trust: 1.0
NVD:	CVE-2021-25514
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2025-02719
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-202112-653
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2021-25514
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2025-02719
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2021-25514
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	3.6
version:	3.1
Trust: 1.0
mobile.security@samsung.com:	CVE-2021-25514
baseSeverity:	LOW
baseScore:	3.3
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	1.4
version:	3.1
Trust: 1.0
NVD:	CVE-2021-25514
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2025-02719 // JVNDB: JVNDB-2021-016089 // CNNVD: CNNVD-202112-653 // NVD: CVE-2021-25514 // NVD: CVE-2021-25514

PROBLEMTYPE DATA

problemtype:	NVD-CWE-Other	Trust: 1.0
problemtype:	others (CWE-Other) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-016089 // NVD: CVE-2021-25514

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202112-653

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202112-653

PATCH

title:	top page	url:	https://www.android.com/	Trust: 0.8
title:	Patch for Samsung Tags Information Disclosure Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/354616	Trust: 0.6
title:	Samsung SMR Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=174853	Trust: 0.6

sources: CNVD: CNVD-2025-02719 // JVNDB: JVNDB-2021-016089 // CNNVD: CNNVD-202112-653

EXTERNAL IDS

db:	NVD	id:	CVE-2021-25514	Trust: 3.8
db:	JVNDB	id:	JVNDB-2021-016089	Trust: 0.8
db:	CNVD	id:	CNVD-2025-02719	Trust: 0.6
db:	CNNVD	id:	CNNVD-202112-653	Trust: 0.6

sources: CNVD: CNVD-2025-02719 // JVNDB: JVNDB-2021-016089 // CNNVD: CNNVD-202112-653 // NVD: CVE-2021-25514

REFERENCES

url:	https://security.samsungmobile.com/securityupdate.smsb?year=2021&month=12	Trust: 2.4
url:	https://nvd.nist.gov/vuln/detail/cve-2021-25514	Trust: 2.0

sources: CNVD: CNVD-2025-02719 // JVNDB: JVNDB-2021-016089 // CNNVD: CNNVD-202112-653 // NVD: CVE-2021-25514

SOURCES

db:	CNVD	id:	CNVD-2025-02719
db:	JVNDB	id:	JVNDB-2021-016089
db:	CNNVD	id:	CNNVD-202112-653
db:	NVD	id:	CVE-2021-25514

LAST UPDATE DATE

2025-02-14T23:15:31.850000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2025-02719	date:	2025-02-12T00:00:00
db:	JVNDB	id:	JVNDB-2021-016089	date:	2022-12-06T07:32:00
db:	CNNVD	id:	CNNVD-202112-653	date:	2021-12-16T00:00:00
db:	NVD	id:	CVE-2021-25514	date:	2021-12-10T17:50:10.177

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2025-02719	date:	2025-02-11T00:00:00
db:	JVNDB	id:	JVNDB-2021-016089	date:	2022-12-06T00:00:00
db:	CNNVD	id:	CNNVD-202112-653	date:	2021-12-08T00:00:00
db:	NVD	id:	CVE-2021-25514	date:	2021-12-08T15:15:08.130