CVE-2021-25420CWE-779

CVE-2021-25420: vulnerability in Samsung Mobile Galaxy Watch PlugIn

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.
Related CVEs — Samsung Mobile Galaxy Watch PlugIn

In the same product, most dangerous first.