긴급도 55/100 심각도 6.2 · 보통 악용확률 64.8% CISA KEV · 2022-11-08 CWE-200

CVE-2021-25369

CISA 기관 조치 기한: 2022-11-29

Samsung Mobile Devices

An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

KEV 필수 조치: Apply updates per vendor instructions.

타임라인

벡터: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N