auren-research/cyber-sec huggingface dataset:
cveID: CVE-2023-36802
vendorProject: Microsoft
product: Streaming Service Proxy
vulnerabilityName: Microsoft Streaming Service Proxy Privilege Escalation Vulnerability
dateAdded: 2023-09-12
shortDescription: Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-10-03
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802; https://nvd.nist.gov/vuln/detail/CVE-2023-36802
cwes: CWE-416
cveID: CVE-2023-41064
vendorProject: Apple
product: iOS, iPadOS, and macOS
vulnerabilityName: Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
dateAdded: 2023-09-11
shortDescription: Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-10-02
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT213905, https://support.apple.com/en-us/HT213906; https://nvd.nist.gov/vuln/detail/CVE-2023-41064
cwes: CWE-120
cveID: CVE-2023-41061
vendorProject: Apple
product: iOS, iPadOS, and watchOS
vulnerabilityName: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
dateAdded: 2023-09-11
shortDescription: Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-10-02
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT213905, https://support.apple.com/kb/HT213907; https://nvd.nist.gov/vuln/detail/CVE-2023-41061
cveID: CVE-2023-33246
vendorProject: Apache
product: RocketMQ
vulnerabilityName: Apache RocketMQ Command Execution Vulnerability
dateAdded: 2023-09-06
shortDescription: Several components of Apache RocketMQ, including NameServer, Broker, and Controller, are exposed to the extranet and lack permission verification. An attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as or achieve the same effect by forging the RocketMQ protocol content.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-09-27
knownRansomwareCampaignUse: Unknown
notes: https://lists.apache.org/thread/1s8j2c8kogthtpv3060yddk03zq0pxyp; https://nvd.nist.gov/vuln/detail/CVE-2023-33246
cwes: CWE-94
cveID: CVE-2023-38831
vendorProject: RARLAB
product: WinRAR
vulnerabilityName: RARLAB WinRAR Code Execution Vulnerability
dateAdded: 2023-08-24
shortDescription: RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-09-14
knownRansomwareCampaignUse: Known
notes: http://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa; https://nvd.nist.gov/vuln/detail/CVE-2023-38831
cwes: CWE-351
cveID: CVE-2023-32315
vendorProject: Ignite Realtime
product: Openfire
vulnerabilityName: Ignite Realtime Openfire Path Traversal Vulnerability
dateAdded: 2023-08-24
shortDescription: Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-09-14
knownRansomwareCampaignUse: Unknown
notes: https://www.igniterealtime.org/downloads/#openfire; https://nvd.nist.gov/vuln/detail/CVE-2023-32315
cwes: CWE-22
cveID: CVE-2023-38035
vendorProject: Ivanti
product: Sentry
vulnerabilityName: Ivanti Sentry Authentication Bypass Vulnerability
dateAdded: 2023-08-22
shortDescription: Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-09-12
knownRansomwareCampaignUse: Known
notes: https://forums.ivanti.com/s/article/CVE-2023-38035-API-Authentication-Bypass-on-Sentry-Administrator-Interface?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-38035
cwes: CWE-863
cveID: CVE-2023-27532
vendorProject: Veeam
product: Backup & Replication
vulnerabilityName: Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
dateAdded: 2023-08-22
shortDescription: Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-09-12
knownRansomwareCampaignUse: Known
notes: https://www.veeam.com/kb4424; https://nvd.nist.gov/vuln/detail/CVE-2023-27532
cwes: CWE-306
cveID: CVE-2023-26359
vendorProject: Adobe
product: ColdFusion
vulnerabilityName: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
dateAdded: 2023-08-21
shortDescription: Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-09-11
knownRansomwareCampaignUse: Unknown
notes: https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html; https://nvd.nist.gov/vuln/detail/CVE-2023-26359
cwes: CWE-502
cveID: CVE-2023-24489
vendorProject: Citrix
product: Content Collaboration
vulnerabilityName: Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
dateAdded: 2023-08-16
shortDescription: Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-09-06
knownRansomwareCampaignUse: Unknown
notes: https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489; https://nvd.nist.gov/vuln/detail/CVE-2023-24489
cwes: CWE-284
cveID: CVE-2023-38180
vendorProject: Microsoft
product: .NET Core and Visual Studio
vulnerabilityName: Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
dateAdded: 2023-08-09
shortDescription: Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-30
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-38180; https://nvd.nist.gov/vuln/detail/CVE-2023-38180
cveID: CVE-2017-18368
vendorProject: Zyxel
product: P660HN-T1A Routers
vulnerabilityName: Zyxel P660HN-T1A Routers Command Injection Vulnerability
dateAdded: 2023-08-07
shortDescription: Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user and exploited via the remote_host parameter of the ViewLog.asp page.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-28
knownRansomwareCampaignUse: Unknown
notes: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-a-new-variant-of-gafgyt-malware; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-p660hn-t1a-dsl-cpe; https://nvd.nist.gov/vuln/detail/CVE-2017-18368
cwes: CWE-78
cveID: CVE-2023-35081
vendorProject: Ivanti
product: Endpoint Manager Mobile (EPMM)
vulnerabilityName: Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
dateAdded: 2023-07-31
shortDescription: Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-21
knownRansomwareCampaignUse: Unknown
notes: https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2023-35081
cwes: CWE-22
cveID: CVE-2023-37580
vendorProject: Synacor
product: Zimbra Collaboration Suite (ZCS)
vulnerabilityName: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
dateAdded: 2023-07-27
shortDescription: Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-17
knownRansomwareCampaignUse: Unknown
notes: https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2023-37580
cwes: CWE-79
cveID: CVE-2023-38606
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products Kernel Unspecified Vulnerability
dateAdded: 2023-07-26
shortDescription: Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-16
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT213841, https://support.apple.com/en-us/HT213842, https://support.apple.com/en-us/HT213843,https://support.apple.com/en-us/HT213844,https://support.apple.com/en-us/HT213845,https://support.apple.com/en-us/HT213846,https://support.apple.com/en-us/HT213848 ; https://nvd.nist.gov/vuln/detail/CVE-2023-38606
cveID: CVE-2023-35078
vendorProject: Ivanti
product: Endpoint Manager Mobile (EPMM)
vulnerabilityName: Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
dateAdded: 2023-07-25
shortDescription: Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device details for users on a vulnerable system. An attacker can also make other configuration changes including installing software and modifying security profiles on registered devices.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-15
knownRansomwareCampaignUse: Known
notes: https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2023-35078
cwes: CWE-287
cveID: CVE-2023-29298
vendorProject: Adobe
product: ColdFusion
vulnerabilityName: Adobe ColdFusion Improper Access Control Vulnerability
dateAdded: 2023-07-20
shortDescription: Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-10
knownRansomwareCampaignUse: Unknown
notes: https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html; https://nvd.nist.gov/vuln/detail/CVE-2023-29298
cwes: CWE-284
cveID: CVE-2023-38205
vendorProject: Adobe
product: ColdFusion
vulnerabilityName: Adobe ColdFusion Improper Access Control Vulnerability
dateAdded: 2023-07-20
shortDescription: Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-10
knownRansomwareCampaignUse: Unknown
notes: https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html ; https://nvd.nist.gov/vuln/detail/CVE-2023-38205
cwes: CWE-284
cveID: CVE-2023-3519
vendorProject: Citrix
product: NetScaler ADC and NetScaler Gateway
vulnerabilityName: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
dateAdded: 2023-07-19
shortDescription: Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-09
knownRansomwareCampaignUse: Known
notes: https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467; https://nvd.nist.gov/vuln/detail/CVE-2023-3519
cwes: CWE-94
cveID: CVE-2023-36884
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Search Remote Code Execution Vulnerability
dateAdded: 2023-07-17
shortDescription: Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.
requiredAction: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
dueDate: 2023-08-29
knownRansomwareCampaignUse: Known
notes: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884; https://nvd.nist.gov/vuln/detail/CVE-2023-36884
cwes: CWE-362
cveID: CVE-2022-29303
vendorProject: SolarView
product: Compact
vulnerabilityName: SolarView Compact Command Injection Vulnerability
dateAdded: 2023-07-13
shortDescription: SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-08-03
knownRansomwareCampaignUse: Unknown
notes: https://jvn.jp/en/vu/JVNVU92327282/; https://nvd.nist.gov/vuln/detail/CVE-2022-29303
cwes: CWE-78
cveID: CVE-2023-37450
vendorProject: Apple
product: Multiple Products
vulnerabilityName: Apple Multiple Products WebKit Code Execution Vulnerability
dateAdded: 2023-07-13
shortDescription: Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-08-03
knownRansomwareCampaignUse: Unknown
notes: https://support.apple.com/en-us/HT213826, https://support.apple.com/en-us/HT213841, https://support.apple.com/en-us/HT213843, https://support.apple.com/en-us/HT213846, https://support.apple.com/en-us/HT213848; https://nvd.nist.gov/vuln/detail/CVE-2023-37450
cveID: CVE-2023-32046
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
dateAdded: 2023-07-11
shortDescription: Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-08-01
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-32046; https://nvd.nist.gov/vuln/detail/CVE-2023-32046
cveID: CVE-2023-32049
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
dateAdded: 2023-07-11
shortDescription: Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-08-01
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-32049; https://nvd.nist.gov/vuln/detail/CVE-2023-32049
cveID: CVE-2023-35311
vendorProject: Microsoft
product: Outlook
vulnerabilityName: Microsoft Outlook Security Feature Bypass Vulnerability
dateAdded: 2023-07-11
shortDescription: Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-08-01
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-35311; https://nvd.nist.gov/vuln/detail/CVE-2023-35311
cwes: CWE-367
cveID: CVE-2023-36874
vendorProject: Microsoft
product: Windows
vulnerabilityName: Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
dateAdded: 2023-07-11
shortDescription: Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-08-01
knownRansomwareCampaignUse: Unknown
notes: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36874; https://nvd.nist.gov/vuln/detail/CVE-2023-36874
cwes: CWE-59
cveID: CVE-2022-31199
vendorProject: Netwrix
product: Auditor
vulnerabilityName: Netwrix Auditor Insecure Object Deserialization Vulnerability
dateAdded: 2023-07-11
shortDescription: Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP, which is commonly blocked by standard enterprise firewalling.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-08-01
knownRansomwareCampaignUse: Known
notes: Patch application requires login to customer portal: https://security.netwrix.com/Account/SignIn?ReturnUrl=%2FAdvisories%2FADV-2022-003; https://nvd.nist.gov/vuln/detail/CVE-2022-31199
cwes: CWE-502
CWE-122
cveID: CVE-2021-29256
vendorProject: Arm
product: Mali Graphics Processing Unit (GPU)
vulnerabilityName: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
dateAdded: 2023-07-07
shortDescription: Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-07-28
knownRansomwareCampaignUse: Unknown
notes: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2021-29256
cwes: CWE-416
cveID: CVE-2019-17621
vendorProject: D-Link
product: DIR-859 Router
vulnerabilityName: D-Link DIR-859 Router Command Execution Vulnerability
dateAdded: 2023-06-29
shortDescription: D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-07-20
knownRansomwareCampaignUse: Unknown
notes: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147; https://nvd.nist.gov/vuln/detail/CVE-2019-17621
cwes: CWE-78
cveID: CVE-2019-20500
vendorProject: D-Link
product: DWL-2600AP Access Point
vulnerabilityName: D-Link DWL-2600AP Access Point Command Injection Vulnerability
dateAdded: 2023-06-29
shortDescription: D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
dueDate: 2023-07-20
knownRansomwareCampaignUse: Unknown
notes: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10113; https://nvd.nist.gov/vuln/detail/CVE-2019-20500
cwes: CWE-78
cveID: CVE-2021-25487
vendorProject: Samsung
product: Mobile Devices
vulnerabilityName: Samsung Mobile Devices Out-of-Bounds Read Vulnerability
dateAdded: 2023-06-29
shortDescription: Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
dueDate: 2023-07-20
knownRansomwareCampaignUse: Unknown
notes: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://nvd.nist.gov/vuln/detail/CVE-2021-25487
cwes: CWE-125
cveID: CVE-2021-25489
vendorProject: Samsung
product: Mobile Devices
vulnerabilityName: Samsung Mobile Devices Improper Input Validation Vulnerability
dateAdded: 2023-06-29
shortDescription: Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.
requiredAction: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
dueDate: 2023-07-20
knownRansomwareCampaignUse: Unknown
notes: https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://nvd.nist.gov/vuln/detail/CVE-2021-25489
cwes: CWE-20