CVEs-PoC/2021/CVE-2021-25437.md

CVE-2021-25437

Description

Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file.

POC

Reference

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7

Github

• https://github.com/imssm99/imssm99
• https://github.com/jungyoon-lee/jungyoon-lee