CVSS 3.1
6.2 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2022-36874
Medium (6.2) in samsung galaxy watch plugin. EPSS 0.2% chance of exploitation in the next 30 days.
Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-755, CWE-280
- Published
- Modified
- Record from
- the NVD, synced
Affected
- samsung:galaxy_watch_plugin