Galaxy Watch Plugin (Samsung) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2022-09-09. Vendor: Samsung.

CVEs of Galaxy Watch Plugin

• CVE-2022-36875 - CVSS 6.6 (medium), 2022-09-09: Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file…
• CVE-2022-36874 - CVSS 6.2 (medium), 2022-09-09: Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and…
• CVE-2022-36873 - CVSS 6.5 (medium), 2022-09-09: Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected…
• CVE-2022-25827 - CVSS 3.3 (low), 2022-03-10: Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp…
• CVE-2022-25823 - CVSS 3.3 (low), 2022-03-10: Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log.
• CVE-2021-25420 - CVSS 5.5 (medium), 2021-06-11: Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password…