Improper Log Management Vulnerability in Galaxy Watch PlugIn by Samsung
CVE-2021-25420

5.5MEDIUM

Key Information:

Vendor

Samsung
Status
Galaxy Watch Plugin
Vendor
CVE Published:
11 June 2021

What is CVE-2021-25420?

The Galaxy Watch PlugIn prior to version 2.2.05.21033151 contains an improper log management vulnerability. This flaw allows an attacker with access to specific log permissions to inadvertently leak sensitive information, such as the Wi-Fi password associated with the user’s smartphone. As a result, unauthorized individuals may exploit this vulnerability to gain access to the user's Wi-Fi network, posing significant security risks.

Affected Version(s)

Galaxy Watch PlugIn < 2.2.05.21033151

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.