CVE-2021-25420
Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - mobile.security@samsung.com
- Published
- 2021-06-11
- Last modified
- 2024-08-03
- Weaknesses
- CWE-532, CWE-779
Affected products
References
- https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=6
