Skip to content
OpenAdvisories
Medium · 4.0 CVE-2022-39889 EUVD-2022-42334GHSA-xpmm-rfmr-767g

Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to acces…

Published Nov 9, 2022 · Updated May 1, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: GalaxyWatch4Plugin

Description

Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information.

Affected products

VendorProductAffectedFixed
Samsung Mobile GalaxyWatch4Plugin unspecified – < 2.2.11.22101351 and 2.2.12.22101351 2.2.11.22101351 and 2.2.12.22101351

References