CVE-2021-25423

Medium

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak…

Samsung Mobile·CWE-779·Published 2021-06-11

CVSS

5.5

EPSS

0.00

KEV

Exploits

cve.orgen

196 chars

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log.

NVDen

196 chars

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log.

Una vulnerabilidad de administración de registros inapropiada en Watch Active2 PlugIn versiones anteriores a 2.2.08.21033151, permite a un atacante con permisos de registro filtrar la contraseña del Wi-Fi conectado al smartphone del usuario por medio de un registro

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N