CVE-2021-25437

Description

Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.

Affected products

• Samsung Mobile / Tizen wearable devicesTizen 5.5 – Firmware update JUL-2021 Release

References

• MISChttps://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7