CVE-2022-36874

MEDIUM 6.2CVE-2022-36874 · Published 09/09/2022 · updated 17/06/2026

In short

CVE-2022-36874 is a MEDIUM (CVSS 6.2) vulnerability affecting galaxy watch plugin (samsung).
Chance of exploitation in the next 30 days (EPSS): 0.20%, higher than 9.9% of all vulnerabilities.
Fix: update to 2.2.11.22040751 or later.

Package	Affected versions	Patched versions
galaxy watch plugin samsung	`< 2.2.11.22040751`	`2.2.11.22040751`

Description

Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.

References

security.samsungmobile.com/serviceWeb.smsb · Vendor Advisory

More vulnerabilities in galaxy watch plugin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

galaxy watch plugin

samsung

< 2.2.11.22040751

2.2.11.22040751

More vulnerabilities in galaxy watch plugin

See all →