samsung watch-active2-plugin CVE-2022-25829 is a vulnerability in Samsung Watch Active2 Plugin
Published on March 10, 2022

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log

NVD

Vulnerability Analysis

CVE-2022-25829 can be exploited with local system access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

What is an Information Disclosure Vulnerability?

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE-2022-25829 has been classified to as an Information Disclosure vulnerability or weakness.


Products Associated with CVE-2022-25829

Want to know whenever a new CVE is published for Samsung Watch Active2 Plugin? stack.watch will email you.

 

Affected Versions

Samsung Mobile Watch Active2 PlugIn:

Exploit Probability

EPSS
0.06%
Percentile
18.81%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.