Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-20939 EUVD-2025-10073GHSA-h477-9mjj-79jx

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update de…

Published Apr 8, 2025 · Updated Apr 8, 2025 · Assigned by SamsungMobile

Description

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Apr-2025 Release in Android Watch 14

Advisories 1

References