SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-30161

Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated.

MEDIUM 5.5EPSS 0.11%

Does this matter?

Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated. The LG ID is LVE-SMP-210002 (April 2021).

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.11% probability · 1th percentile
CISA KEV
Not listed
Affected
google/android
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.