Samsung
Samsung Wear OS: vulnerabilidades y CVE
Samsung Wear OS tiene 19 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE19
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-21045 | Media (5.5) | 0.13% | — | 10 oct 2025 | Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. |
| CVE-2025-21004 | Media (5.5) | 0.09% | — | 8 jul 2025 | Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device. |
| CVE-2025-20998 | Baja (3.3) | 0.13% | — | 8 jul 2025 | Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number. |
| CVE-2025-20997 | Media (5.5) | 0.13% | — | 8 jul 2025 | Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch. |
| CVE-2025-20986 | Media (5.5) | 0.14% | — | 4 jun 2025 | Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots. |
| CVE-2025-20984 | Media (6.2) | 0.14% | — | 4 jun 2025 | Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch. |
| CVE-2025-20956 | Media (4.3) | 0.19% | — | 7 may 2025 | Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows physical attackers to access developer settings. |
| CVE-2025-20946 | Alta (8.8) | 0.27% | — | 8 abr 2025 | Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without… |
| CVE-2025-20945 | Media (6.2) | 0.16% | — | 8 abr 2025 | Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch. |
| CVE-2025-20939 | Media (5.4) | 0.19% | — | 8 abr 2025 | Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices. |
| CVE-2025-20912 | Media (6.2) | 0.15% | — | 6 mar 2025 | Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch. |
| CVE-2025-20911 | Media (4.4) | 0.14% | — | 6 mar 2025 | Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch. |
| CVE-2025-20910 | Media (6.2) | 0.15% | — | 6 mar 2025 | Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery. |
| CVE-2024-34613 | Media (5.5) | 0.13% | — | 7 ago 2024 | Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watch. |
| CVE-2022-24930 | Baja (3.3) | 0.43% | — | 10 mar 2022 | An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper permission |
| CVE-2022-23997 | Baja (3.3) | 0.44% | — | 11 feb 2022 | Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission. |
| CVE-2022-23996 | Baja (3.3) | 0.44% | — | 11 feb 2022 | Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission. |
| CVE-2022-23995 | Baja (3.3) | 0.44% | — | 11 feb 2022 | Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission. |
| CVE-2022-23994 | Baja (3.3) | 0.45% | — | 11 feb 2022 | An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.