CVE-2022-36874: Medium severity samsung galaxy watch plugin vulnerability
Published Sep 9, 2022
·Updated
Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.
Affected Software
1 affected component
Samsung Galaxy Watch Plugin Android<2.2.11.22040751
Event History
Sep 9, 2022
CVE Published
via MITRE·02:40 PM
Data Sourced
via MITRE·02:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-36874?
CVE-2022-36874 is classified as a high severity vulnerability due to unauthorized access to sensitive device information.
2
How do I fix CVE-2022-36874?
To resolve CVE-2022-36874, update the Waterplugin to version 2.2.11.22040751 or later.
3
What devices are impacted by CVE-2022-36874?
CVE-2022-36874 affects Samsung Galaxy Watch Plugin versions prior to 2.2.11.22040751.
4
What information can an attacker access due to CVE-2022-36874?
An attacker exploiting CVE-2022-36874 can gain access to sensitive information such as the device IMEI and Serial number.
5
Is CVE-2022-36874 a local or remote attack vulnerability?
CVE-2022-36874 is primarily a local attack vulnerability, requiring the attacker to have access to the affected device.