CVE-2021-41850 Details
Description
An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located on the device, even those with no permissions granted, exposing the IMEI values to processes without enforcing any access control.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://athack.com/session-details/401 | CVE | Third Party Advisory |
| https://simowireless.com/ | CVE | Vendor Advisory |
| https://www.kryptowire.com/android-firmware-2022/ | CVE | Broken Link |
| https://www.kryptowire.com/blog/vsim-vulnerability-within-simo-android-phones-exposed/ | CVE | ExploitThird Party Advisory |
| https://athack.com/session-details/401 | [email protected] | Third Party Advisory |
| https://simowireless.com/ | [email protected] | Vendor Advisory |
| https://www.kryptowire.com/android-firmware-2022/ | [email protected] | Broken Link |
| https://www.kryptowire.com/blog/vsim-vulnerability-within-simo-android-phones-exposed/ | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| bluproducts g90 firmware | All versions |
CPE
Remediation
| |
| bluproducts g90 | All versions |
CPE
Remediation
| |
| bluproducts g9 firmware | All versions |
CPE
Remediation
| |
| bluproducts g9 | All versions |
CPE
Remediation
| |
| wikomobile tommy 3 firmware | All versions |
CPE
Remediation
| |
| wikomobile tommy 3 | All versions |
CPE
Remediation
| |
| wikomobile tommy 3 plus firmware | All versions |
CPE
Remediation
| |
| wikomobile tommy 3 plus | All versions |
CPE
Remediation
| |
| luna simo firmware | All versions |
CPE
Remediation
| |
| luna simo | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jul 12, 2022 | CWE Remap | [email protected] |
| Mar 20, 2022 | Initial Analysis | [email protected] |