CVEDB API

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 9.2%

CVSS Severity

CVSS v3 Score 6.2

References

Products affected by CVE-2025-20912

Samsung » Galaxy Watch » Version: N/A

cpe:2.3:h:samsung:galaxy_watch:-
Samsung » Galaxy Watch 4 » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_4:-
Samsung » Galaxy Watch 4 Classic » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_4_classic:-
Samsung » Galaxy Watch 5 » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_5:-
Samsung » Galaxy Watch 5 Pro » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_5_pro:-
Samsung » Galaxy Watch 6 » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_6:-
Samsung » Galaxy Watch 6 Classic » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_6_classic:-
Samsung » Galaxy Watch 7 » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_7:-
Samsung » Galaxy Watch Fe » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_fe:-
Samsung » Galaxy Watch Ultra » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_ultra:-
Samsung » Wear Os » Version: 5.0

cpe:2.3:o:samsung:wear_os:5.0