Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.
References
| Link | Resource |
|---|---|
| https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=03 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
02 Feb 2026, 18:14
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| First Time |
Samsung galaxy Watch 4
Samsung galaxy Watch Samsung Samsung galaxy Watch 5 Samsung galaxy Watch 5 Pro Samsung wear Os Samsung galaxy Watch Ultra Samsung galaxy Watch 7 Samsung galaxy Watch 6 Samsung galaxy Watch 4 Classic Samsung galaxy Watch 6 Classic Samsung galaxy Watch Fe |
|
| CPE | cpe:2.3:h:samsung:galaxy_watch_4_classic:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_fe:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_7:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:wear_os:5.0:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_ultra:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_5:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_6_classic:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_5_pro:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_6:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_4:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=03 - Vendor Advisory |
06 Mar 2025, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-06 05:15
Updated : 2026-02-02 18:14
NVD link : CVE-2025-20911
Mitre link : CVE-2025-20911
CVE.ORG link : CVE-2025-20911
JSON object : View
Products Affected
samsung
- galaxy_watch_fe
- galaxy_watch_6
- galaxy_watch_ultra
- galaxy_watch_4
- galaxy_watch_5
- wear_os
- galaxy_watch_5_pro
- galaxy_watch_7
- galaxy_watch
- galaxy_watch_6_classic
- galaxy_watch_4_classic
CWE