CVE-2021-39373

Samsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk management. WideCharToMultiByte, WideCharStr, and MultiByteStr can contribute to password exposure.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.34% chance of exploitation in the next 30 days, 27th percentile

Published

2021-09-01

Updated

2024-08-04

Proof-of-concept exploits (1)

• bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-j3f7-346q-97f4

References

• CVE Record
• NVD entry

Related

• CVE-2021-39352
• CVE-2021-39375
• CVE-2021-39350
• CVE-2021-39376
• CVE-2021-39341
• CVE-2021-39377