CVE-2021-25423 - AskarLabs CVE Database

CVE-2021-25423

Vendor Samsung Mobile

Product Watch Active2 PlugIn

Weakness CWE-779

Published June 11, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log.

Key dates

02Disclosure timeline

June 11, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-25423 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/779.html

Related vulnerabilities

04Related CVE

CVE-2024-1141 Glance-store: glance store access key logged in debug log level CVE-2022-25779 Insufficient scope checks allows adding unrelated audit log entries CVE-2026-20210 Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability CVE-2024-36416 SuiteCRM v4 API Excessive log data DOS CVE-2021-25421