PT-2021-16641

CVE-2021-25451

·

Published

2021-09-09

·

Updated

2021-09-23

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: NetworkPolicyManagerService versions prior to SMR Sep-2021 Release 1
Description: A PendingIntent hijacking issue in NetworkPolicyManagerService allows attackers to obtain IMSI data.
Recommendations: For versions prior to SMR Sep-2021 Release 1, update to SMR Sep-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data handled by the NetworkPolicyManagerService until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2021-25451
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com