CVE-2021-30162

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS services to bypass access control on specific content providers. The LG ID is LVE-SMP-210003 (April 2021).

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published
Apr 6, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-301637.5Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that hCVE-2021-301649.8Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues ACVE-2021-301658.1The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware CVE-2021-301667.2The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a commanCVE-2021-301679.8The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and furthCVE-2021-301689.8The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential CVE-2021-301697.5The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential.CVE-2021-30177.5The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading theCVE-2021-301705.4Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject CVE-2021-301715.4Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JaCVE-2021-301725.4Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authentCVE-2021-301736.5Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path in
CVE-2021-30162: High severity, CVSS 7.1 | Vulnix