PT-2021-16661

CVE-2021-25471

·

Published

2021-10-06

·

Updated

2021-10-13

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Security Mode Command process versions prior to SMR Oct-2021 Release 1
Description: The issue is related to a lack of replay attack protection in the Security Mode Command process. This can lead to denial of service on mobile network connections and cause battery depletion.
Recommendations: For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Security Mode Command process to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾