PT-2025-23746 · Samsung · Samsung Cloud For Galaxy Watch

Localh0Ster · Published 2025-06-04 · Updated 2026-02-02 · CVE-2025-20984

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Cloud for Galaxy Watch versions prior to SMR Jun-2025 Release 1

Description The issue is related to an incorrect default permission setting in Samsung Cloud for Galaxy Watch, allowing local attackers to access data. This could potentially expose sensitive information.

Recommendations For versions prior to SMR Jun-2025 Release 1, update to SMR Jun-2025 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data stored in Samsung Cloud for Galaxy Watch until the update is applied.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-20984

Affected Products

Samsung Cloud For Galaxy Watch

References · 6

• https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=06 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-20984 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20984 · Security Note
• https://t.me/cvetracker/25352 · Telegram Post
• https://t.me/cveNotify/150616 · Telegram Post
• https://twitter.com/CVEnew/status/1930131539213365416 · Twitter Post