CVE-2021-39373 Information disclosure in n/a
Attackers can bypass access controls and expose passwords in Samsung Drive Manager on H3 devices, leading to unauthorized data access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-39373?
CVE-2021-39373 is a high-severity vulnerability in n/a, published on 1 Sep 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Samsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk management. WideCharToMultiByte, WideCharStr, and MultiByteStr can contribute to password exposure.
Weakness: CWE-522
Which versions are affected by CVE-2021-39373?
It affects 1 product.
Products include Samsung Drive Manager.
How do I fix CVE-2021-39373?
No fix has been published for CVE-2021-39373 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-39373 being exploited?
There is no known exploitation of CVE-2021-39373 in the wild and no public exploit code.