CVE-2022-25829

Low

Description

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log

SeverityLow
CVSS1.9
Exploit probability—
ProductSamsung Watch Active2 Plugin
PublishedMar 10, 2022
First seenMar 10, 2022

How to fix

Update
  • samsung watch_active2_plugin2.2.08.22012751 or later

Affected products

ProductAffected versionsFixed in
samsung watch_active2_pluginv < 2.2.08.220127512.2.08.22012751

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-25829 · Samsung Watch Active2 Plugin · Dark Radar