CVE-2025-20945
6.2
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.5 / Impact: 3.6
Source: NVD
Description
Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch.
Affected (1)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 5.0 |
| Running on/with | Platform Versions |
|---|---|
Samsung Galaxy Watch | All versions |
Samsung Galaxy Watch 4 | All versions |
Samsung Galaxy Watch 4 Classic | All versions |
Samsung Galaxy Watch 5 | All versions |
Samsung Galaxy Watch 5 Pro | All versions |
Samsung Galaxy Watch 6 | All versions |
Samsung Galaxy Watch 6 Classic | All versions |
Samsung Galaxy Watch 7 | All versions |
Samsung Galaxy Watch Fe | All versions |
Samsung Galaxy Watch Ultra | All versions |
References (1)
Source: mobile.security@samsung.com
Vendor Advisory
Timeline
No history available yet.