Vulnerabilities > CVE-2021-25344 - Missing Authorization vulnerability in Google Android 10.0/11.0
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 2 |