PT-2025-32114 · Samsung · Wcsextension+1

Localh0Ster · Published 2025-03-21 · Updated 2025-08-06 · CVE-2025-21023

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Galaxy Watch WcsExtension versions prior to Android Watch 16

Description An improper access control issue exists in WcsExtension for Galaxy Watch. This allows local attackers to access sensitive information.

Recommendations Update to Android Watch 16 or later to resolve this issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-11601

CVE-2025-21023

Affected Products

Galaxy Watch

Wcsextension

References · 7

• https://bdu.fstec.ru/vul/2025-11601 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21023 · Security Note
• https://twitter.com/VulmonFeeds/status/1953132251845140973 · Twitter Post
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08 · Note
• https://twitter.com/CVEnew/status/1952957716571525522 · Twitter Post
• https://t.me/CVEtracker/29303 · Telegram Post
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08 · Note