cbcvebase.
CVE-2025-20911
published 2025-03-06

CVE-2025-20911: Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.

PriorityP417medium4.4CVSS 3.1
AVLACLPRHUINSUCNIHAN
EPSS
0.13%
2.7th percentile
Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.

Affected

1 ranges
VendorProductVersion rangeFixed in
samsungwear_os——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.