NetSight
IP …
medium4.0

CVE-2021-25459

An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockchainTZService.

Impact

An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockchainTZService.

Affected products

VendorProductAffected versions
GoogleAndroid
Versions 10.0, 11.0

Weakness classification

CWE-285

References