// For flags

CVE-2021-3898

 

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which could lead to the communication channel being accessible by an attacker.

Las versiones de las aplicaciones Android de Motorola Ready For y Motorola Device Help anteriores al 08-04-2021, no verifican apropiadamente el certificado del servidor, lo que podría conllevar a que el canal de comunicación fuera accesible para un atacante

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-10-22 CVE Reserved
  • 2022-04-22 CVE Published
  • 2024-08-03 CVE Updated
  • 2024-11-26 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-295: Improper Certificate Validation
CAPEC
References (1)
URL Tag Source
https://support.lenovo.com/us/en/product_security/LEN-58311 Third Party Advisory
URL Date SRC
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Motorola
Search vendor "Motorola"
 Device Help
Search vendor "Motorola" for product "Device Help"
 < 2021-04-08
Search vendor "Motorola" for product "Device Help" and version " < 2021-04-08"
android
Affected
Motorola
Search vendor "Motorola"
 Ready For
Search vendor "Motorola" for product "Ready For"
 < 2021-04-08
Search vendor "Motorola" for product "Ready For" and version " < 2021-04-08"
android
Affected