CVE-2022-25828

LOW

Samsung Watch Active Plugin < 2.2.07.22012751 - Information Disclosure

Title source: rule

Description

Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3

Scores

CVSS v3 1.9

EPSS 0.0006

EPSS Percentile 18.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-532 CWE-200

Status published

Products (1)

samsung/watch_active_plugin < 2.2.07.22012751

Published Mar 10, 2022

Tracked Since Feb 18, 2026