← Database

CVE-2025-20912

MEDIUM CVSS: 6.2 Published: 2025-03-06 Modified: 2026-06-17

Description

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch.

Affected Platforms

Samsung Galaxy Watch 6 ClassicSamsung Galaxy Watch 5 ProSamsung Galaxy Watch FeSamsung Galaxy Watch 4 ClassicSamsung Galaxy WatchSamsung Galaxy Watch 5Samsung Wear OsSamsung Galaxy Watch 4Samsung Galaxy Watch 6Samsung Galaxy Watch 7

Weakness Type

CWE-922

References