PT-2021-16661
CVE-2021-25471
·
Published
2021-10-06
·
Updated
2021-10-13
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Security Mode Command process versions prior to SMR Oct-2021 Release 1
Description:
The issue is related to a lack of replay attack protection in the Security Mode Command process. This can lead to denial of service on mobile network connections and cause battery depletion.
Recommendations:
For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Security Mode Command process to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾