CVE-2022-25826

LOW

Samsung Galaxy Watch 3 Plugin - Information Disclosure

Title source: rule

Description

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3

Scores

CVSS v3 1.9

EPSS 0.0013

EPSS Percentile 32.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-532 CWE-200

Status published

Products (1)

samsung/galaxy_watch_3_plugin < 2.2.03.22012751

Published Mar 10, 2022

Tracked Since Feb 18, 2026