CVE-2025-20911: Medium severity Samsung Galaxy Watch vulnerability
Published Mar 6, 2025
·Updated
Improper access control in semwifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.
Affected Software
12 affected components
Samsung Galaxy Watch<SMR Mar-2025 Release 1
All of the following
Samsung Wear Os=5.0
Any of the following
Samsung Galaxy Watch
Samsung Galaxy Watch 4
Samsung Galaxy Watch 4 Classic
Samsung Galaxy Watch 5
Samsung Galaxy Watch 5 Pro
Samsung Galaxy Watch 6
Samsung Galaxy Watch 6 Classic
Samsung Galaxy Watch 7
Samsung Galaxy Watch Fe
Samsung Galaxy Watch Ultra
Event History
Mar 6, 2025
CVE Published
via MITRE·05:04 AM
Data Sourced
via MITRE·05:04 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20911?
CVE-2025-20911 is classified as a privilege escalation vulnerability.
2
How do I fix CVE-2025-20911?
To mitigate CVE-2025-20911, update your Samsung Galaxy Watch to the SMR Mar-2025 Release 1 or later.
3
Who is affected by CVE-2025-20911?
CVE-2025-20911 affects Samsung Galaxy Watch devices that are running versions prior to SMR Mar-2025 Release 1.
4
What type of vulnerability is CVE-2025-20911?
CVE-2025-20911 is an improper access control vulnerability.
5
Can a remote attacker exploit CVE-2025-20911?
No, CVE-2025-20911 can only be exploited by a local attacker with privileged access.