CVE-2022-36873

published 2022-09-09

CVE-2022-36873: Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected…

Priority P4 25 medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C H I N A N

Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
samsung	galaxy_watch_plugin	< 2.2.11.22081151	2.2.11.22081151
samsung_mobile	com.samsung.android.waterplugin	>= unspecified < 2.2.11.22081151	2.2.11.22081151

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20