CVE-2025-20945

CWE-9223 documents3 sources
Severity
6.2MEDIUM
EPSS
0.1%
top 75.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Samsung Wear OS
Timeline
PublishedApr 8

Description

Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.5 | Impact: 1.4

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2025-20945: Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch↗2025-04-08
▶
GHSA
GHSA-535p-c89j-pqj5: Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch↗2025-04-08
▶
CVE-2025-20945 (MEDIUM CVSS 6.2) | Improper access control in Galaxy W | cvebase.io