CVE-2021-25420

published 2021-06-11

CVE-2021-25420: Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
samsung	galaxy_watch_plugin	< 2.2.05.21033151	2.2.05.21033151
samsung_mobile	galaxy_watch_plugin	>= unspecified < 2.2.05.21033151	2.2.05.21033151

CWE-779 CWE-532