Read the docs
TI-2021-07582 Aliases CVE-2021-25343GHSA-8mqf-hqpq-qxwj

Improper authentication in Samsung Members

Priority LOW 18CWE-287Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Why it matters now

EPSS 0.00224 13th percentileScored 2026-11-07
Fix Fixed Samsung Members (Samsung Mobile): 2.4.81.13, 3.8.00.13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungSamsung MembersAndroid O(8.1) and below to before 2.4.81.13; Android P(9.0) and above to before 3.8.00.132.4.81.13, 3.8.00.13Patch availableCNA
  • Samsung Members VendorSamsung Affected Android O(8.1) and below to before 2.4.81.13; Android P(9.0) and above to before 3.8.00.13 Fixed in 2.4.81.13, 3.8.00.13 Patch available CNA

CPE configurations NVD · 65

CPEVersionsRoleVendor
cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*before 2.4.81.13VulnerableSamsung
cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*1.0Running onGoogle
cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*1.1Running onGoogle
cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*1.5Running onGoogle
cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*1.6Running onGoogle
cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:*2.0Running onGoogle
cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:*2.0.1Running onGoogle
cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*2.1Running onGoogle
cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*2.2Running onGoogle
cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:*2.2 rev1Running onGoogle
  • cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:* Versions before 2.4.81.13 Vulnerable ·Samsung
  • cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·Google
  • cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:* Versions 1.1 Running on ·Google
  • cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:* Versions 1.5 Running on ·Google
  • cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:* Versions 1.6 Running on ·Google
  • cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·Google
  • cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Running on ·Google
  • cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:* Versions 2.1 Running on ·Google
  • cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:* Versions 2.2 Running on ·Google
  • cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:* Versions 2.2 rev1 Running on ·Google
Show 55 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*2.2.1Running onGoogle
cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:*2.2.2Running onGoogle
cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:*2.2.3Running onGoogle
cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:*2.3Running onGoogle
cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:*2.3 rev1Running onGoogle
cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:*2.3.1Running onGoogle
cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:*2.3.2Running onGoogle
cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:*2.3.3Running onGoogle
cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:*2.3.4Running onGoogle
cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:*2.3.5Running onGoogle
cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:*2.3.6Running onGoogle
cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:*2.3.7Running onGoogle
cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:*3.0Running onGoogle
cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:*3.1Running onGoogle
cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:*3.2Running onGoogle
cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:*3.2.1Running onGoogle
cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:*3.2.2Running onGoogle
cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:*3.2.4Running onGoogle
cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:*3.2.6Running onGoogle
cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*4.0Running onGoogle
cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*4.0.1Running onGoogle
cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*4.0.2Running onGoogle
cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*4.0.3Running onGoogle
cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*4.0.4Running onGoogle
cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*4.1Running onGoogle
cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:*4.1.1Running onGoogle
cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*4.1.2Running onGoogle
cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*4.2Running onGoogle
cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*4.2.1Running onGoogle
cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*4.2.2Running onGoogle
cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*4.3Running onGoogle
cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*4.3.1Running onGoogle
cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*4.4Running onGoogle
cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*4.4.1Running onGoogle
cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*4.4.2Running onGoogle
cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*4.4.3Running onGoogle
cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*4.4.4Running onGoogle
cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*5.0Running onGoogle
cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*5.0.1Running onGoogle
cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*5.0.2Running onGoogle
cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*5.1Running onGoogle
cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*5.1.0Running onGoogle
cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*5.1.1Running onGoogle
cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*6.0Running onGoogle
cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*6.0.1Running onGoogle
cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*7.0Running onGoogle
cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*7.1.0Running onGoogle
cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*7.1.1Running onGoogle
cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*7.1.2Running onGoogle
cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*8.0Running onGoogle
cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*8.1Running onGoogle
cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*before 3.8.00.13VulnerableSamsung
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*9.0Running onGoogle
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*10.0Running onGoogle
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*11.0Running onGoogle
  • cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Running on ·Google
  • cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Running on ·Google
  • cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Running on ·Google
  • cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:* Versions 2.3 Running on ·Google
  • cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:* Versions 2.3 rev1 Running on ·Google
  • cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Running on ·Google
  • cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Running on ·Google
  • cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:* Versions 2.3.3 Running on ·Google
  • cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:* Versions 2.3.4 Running on ·Google
  • cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:* Versions 2.3.5 Running on ·Google
  • cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:* Versions 2.3.6 Running on ·Google
  • cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:* Versions 2.3.7 Running on ·Google
  • cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·Google
  • cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:* Versions 3.1 Running on ·Google
  • cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:* Versions 3.2 Running on ·Google
  • cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Running on ·Google
  • cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Running on ·Google
  • cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Running on ·Google
  • cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Running on ·Google
  • cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·Google
  • cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Running on ·Google
  • cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Running on ·Google
  • cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Running on ·Google
  • cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Running on ·Google
  • cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:* Versions 4.1 Running on ·Google
  • cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Running on ·Google
  • cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Running on ·Google
  • cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:* Versions 4.2 Running on ·Google
  • cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Running on ·Google
  • cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:* Versions 4.2.2 Running on ·Google
  • cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:* Versions 4.3 Running on ·Google
  • cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Running on ·Google
  • cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:* Versions 4.4 Running on ·Google
  • cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:* Versions 4.4.1 Running on ·Google
  • cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:* Versions 4.4.2 Running on ·Google
  • cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:* Versions 4.4.3 Running on ·Google
  • cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:* Versions 4.4.4 Running on ·Google
  • cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:* Versions 5.0 Running on ·Google
  • cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Running on ·Google
  • cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:* Versions 5.0.2 Running on ·Google
  • cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:* Versions 5.1 Running on ·Google
  • cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:* Versions 5.1.0 Running on ·Google
  • cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:* Versions 5.1.1 Running on ·Google
  • cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·Google
  • cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:* Versions 6.0.1 Running on ·Google
  • cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·Google
  • cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:* Versions 7.1.0 Running on ·Google
  • cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Running on ·Google
  • cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:* Versions 7.1.2 Running on ·Google
  • cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:* Versions 8.0 Running on ·Google
  • cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:* Versions 8.1 Running on ·Google
  • cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:* Versions before 3.8.00.13 Vulnerable ·Samsung
  • cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:* Versions 9.0 Running on ·Google
  • cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* Versions 10.0 Running on ·Google
  • cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* Versions 11.0 Running on ·Google

Remediation

  • Fix · CNA Samsung Members (Samsung Mobile) Fixed in 2.4.81.13, 3.8.00.13

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-25343
  2. 2026-10-03 Alias added: GHSA-8mqf-hqpq-qxwj

References

Advisory 2

  • TI-2021-07613 Improper authorization in Samsung Members CVSS 3.1HIGH 8.6
  • TI-2025-14945 Path traversal in Samsung Members CVSS 3.1CRITICAL 9.1
  • TI-2021-07677 Improper access control in Samsung Members CVSS 3.1HIGH 7.8
  • TI-2025-15075 Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote… CVSS 3.1HIGH 8.1
  • TI-2026-17002 Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote… CVSS 4.0HIGH 7.0
  • TI-2026-17054 Improper input validation in Samsung Members prior to version 5.8.01.5 allows local… CVSS 4.0MEDIUM 6.9
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences