CVEDB API

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 2.7%

CVSS Severity

CVSS v3 Score 5.5

References

Products affected by CVE-2025-20998

Samsung » Galaxy Watch » Version: N/A

cpe:2.3:h:samsung:galaxy_watch:-
Samsung » Galaxy Watch 4 » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_4:-
Samsung » Galaxy Watch 4 Classic » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_4_classic:-
Samsung » Galaxy Watch 5 » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_5:-
Samsung » Galaxy Watch 5 Pro » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_5_pro:-
Samsung » Galaxy Watch 6 » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_6:-
Samsung » Galaxy Watch 6 Classic » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_6_classic:-
Samsung » Galaxy Watch 7 » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_7:-
Samsung » Galaxy Watch Fe » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_fe:-
Samsung » Galaxy Watch Ultra » Version: N/A

cpe:2.3:h:samsung:galaxy_watch_ultra:-
Samsung » Wear Os » Version: 5.0

cpe:2.3:o:samsung:wear_os:5.0