« Volver al listado

CVE-2025-20984

Estado: AnalizadaMedia (6.2)—

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Samsung — Wear OS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-20984",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-20984",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-04T13:53:52.720187Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "mobile.security@samsung.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 2.5
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.2,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.5
      }
    ]
  },
  "affected": [
    {
      "source": "mobile.security@samsung.com",
      "affectedData": [
        {
          "vendor": "Samsung Mobile",
          "product": "Samsung Mobile Devices",
          "versions": [
            {
              "status": "unaffected",
              "version": "SMR Jun-2025 Release in Android Watch 14"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-06-04T05:15:23.213",
  "references": [
    {
      "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "mobile.security@samsung.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-276"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to access data in Samsung Cloud for Galaxy Watch."
    },
    {
      "lang": "es",
      "value": "El permiso predeterminado incorrecto en Samsung Cloud para Galaxy Watch anterior a SMR Jun-2025 Release 1 permite que atacantes locales accedan a datos en Samsung Cloud para Galaxy Watch."
    }
  ],
  "lastModified": "2026-06-17T08:42:20.743",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:samsung:wear_os:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60AD2A4D-9915-41E5-BC98-92B43FD013ED"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "978A382D-C441-4463-9B16-F6BE7E4E0527"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_4:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8B7CB402-94B7-494B-B527-AF7224257D16"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_4_classic:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EE4113D9-FDB3-42B3-84FB-5708E255E9A1"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C0FBE6B7-1633-40ED-B6FB-6E2AFCC49FB4"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_5_pro:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DF3600A1-87FC-4288-B45E-5819C42608D5"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_6:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1937C6F7-8634-4825-ABFC-218DEFFFC2E7"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_6_classic:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3EDAFF12-E8DD-4A30-A28C-245CE283EC80"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_7:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5B2F17A5-E4EA-4A6B-BE76-575C82E4308D"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_fe:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1C5FAF84-EF64-4E15-A211-72274A1EABA5"
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_watch_ultra:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AC6A3702-DCD4-4C97-9F07-D35959A29EE1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "mobile.security@samsung.com"
}