Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.
References
| Link | Resource |
|---|---|
| https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Jan 2026, 14:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Samsung galaxy Watch 4
Samsung galaxy Watch Samsung Samsung galaxy Watch 5 Samsung galaxy Watch 5 Pro Samsung wear Os Samsung galaxy Watch Ultra Samsung galaxy Watch 7 Samsung galaxy Watch 6 Samsung galaxy Watch 4 Classic Samsung galaxy Watch 6 Classic Samsung galaxy Watch Fe |
|
| References | () https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=07 - Vendor Advisory | |
| CPE | cpe:2.3:h:samsung:galaxy_watch_4_classic:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_fe:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_7:-:*:*:*:*:*:*:* cpe:2.3:o:samsung:wear_os:5.0:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_ultra:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_5:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_6_classic:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_5_pro:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_6:-:*:*:*:*:*:*:* cpe:2.3:h:samsung:galaxy_watch_4:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo |
08 Jul 2025, 16:18
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
08 Jul 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-08 11:15
Updated : 2026-01-20 14:42
NVD link : CVE-2025-20998
Mitre link : CVE-2025-20998
CVE.ORG link : CVE-2025-20998
JSON object : View
Products Affected
samsung
- galaxy_watch_fe
- galaxy_watch_6
- galaxy_watch_ultra
- galaxy_watch_4
- galaxy_watch_5
- wear_os
- galaxy_watch_5_pro
- galaxy_watch_7
- galaxy_watch
- galaxy_watch_6_classic
- galaxy_watch_4_classic
CWE