← Database
CVE-2025-20939
MEDIUM
CVSS: 5.4
Published: 2025-04-08
Modified: 2026-06-17
Description
Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices.
Affected Platforms
Samsung Galaxy Watch 6 ClassicSamsung Galaxy Watch 5 ProSamsung Galaxy Watch FeSamsung Galaxy Watch 4 ClassicSamsung Galaxy WatchSamsung Galaxy Watch 5Samsung Wear OsSamsung Galaxy Watch 4Samsung Galaxy Watch 6Samsung Galaxy Watch 7
Weakness Type
NVD-CWE-noinfo