Samsung Galaxy Watch Plugin vulnerabilities
6 vulnerabilities
Known vulnerabilities in Samsung Galaxy Watch Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25420samsung mobilegalaxy watch plugin+1
EPSS score0.24%
Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.CVE-2022-36875samsung mobilecom.samsung.android.waterplugin+1EPSS score0.20%
Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission.CVE-2022-36873samsung mobilecom.samsung.android.waterplugin+1EPSS score0.23%
Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.CVE-2022-36874samsung mobilewaterplugin+1EPSS score0.20%
Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.CVE-2022-25827samsung mobilegalaxy watch plugin+1EPSS score0.21%
Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the logCVE-2022-25823samsung mobilegalaxy watch plugin+1EPSS score0.21%
Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log.