Improper Log Management in Samsung Watch Active2 Plugin

CVE-2021-25423

What is CVE-2021-25423?

An improper log management vulnerability in the Samsung Watch Active2 Plugin prior to version 2.2.08.21033151 allows an attacker with log permissions to potentially leak sensitive information, specifically the Wi-Fi passwords of the connected smartphone. This presents a risk to users, as malicious actors could exploit this weakness to gain unauthorized access to personal networks. Addressing this vulnerability is crucial for maintaining the integrity and security of user data.

References