« Volver al listado

CVE-2021-26278

Estado: AplazadaMedia (6.3)—

The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-26278",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-26278",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-17T15:25:19.006568Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vivo.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.3,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@vivo.com",
      "affectedData": [
        {
          "vendor": "vivo",
          "product": "Wifi",
          "versions": [
            {
              "status": "affected",
              "version": "Versions earlier than Android 10"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-12-17T03:15:06.573",
  "references": [
    {
      "url": "https://www.vivo.com/en/support/security-advisory-detail?id=7",
      "source": "security@vivo.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@vivo.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The wifi module exposes the interface and has improper permission control, leaking sensitive information about the device."
    },
    {
      "lang": "es",
      "value": "El módulo wifi expone la interfaz y tiene un control de permisos indebido, filtrando información confidencial sobre el dispositivo."
    }
  ],
  "lastModified": "2026-06-17T03:43:03.073",
  "sourceIdentifier": "security@vivo.com"
}