CVE-2021-25422CWE-779

CVE-2021-25422: vulnerability in Samsung Mobile Watch Active PlugIn

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.
Related CVEs — Samsung Mobile Watch Active PlugIn

In the same product, most dangerous first.