Threat Investigation
Request a demo

CVE-2021-25406

Medium

Description

Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information.

SeverityMedium
CVSS6.5
Exploit probability—
ProductSamsung Gear S
PublishedJun 11, 2021
First seenJun 11, 2021
Weakness typeCWE-922CWE-922

How to fix

Update
  • samsung gear_s2.2.05.20122441 or later

Affected products

ProductAffected versionsFixed in
samsung gear_sv < 2.2.05.201224412.2.05.20122441

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.