medium5.4
CVE-2025-20939
Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifi…
Impact
Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Wear Os | Version 5.0 |