CVE-2025-20911

published 2025-03-06

CVE-2025-20911: Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.

medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C N I H A N

Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
samsung	wear_os	—	—