Samsung Galaxy Watch Improper Access Control Vulnerability in SamsungAccount

Vulnerability

A vulnerability exists in the SamsungAccount component for Galaxy Watch devices running versions prior to the SMR July 2025 Release 1. This vulnerability allows local attackers to access the phone number of the device. The issue stems from improper access control, which has been addressed in the July 2025 security update.

Impact

Exploitation of this vulnerability allows local attackers to access the phone number associated with the Galaxy Watch.

Remediation

Users can update their devices to the SMR July 2025 Release 1 to address this vulnerability.

Added: Jul 8, 2025, 12:10 PM
Updated: Jul 8, 2025, 12:10 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
3.3
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.