Samsung Mobile Galaxy Watch3 Plugin vulnerabilities

2 known vulnerabilities affecting samsung_mobile/galaxy_watch3_plugin.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1LOW1

Vulnerabilities

Page 1 of 1

CVE-2022-25830LOWCVSS 3.3≥ -, < 2.2.09.220127512022-03-10

CVE-2022-25830 [LOW] CWE-200 CVE-2022-25830: Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows a Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connected WiFiAp in the log

CVE-2021-25421MEDIUMCVSS 5.5≥ unspecified, < 2.2.09.210331512021-06-11

CVE-2021-25421 [MEDIUM] CWE-779 CVE-2021-25421: Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allow Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.