CVE-2022-25829

Affected software: Samsung Watch Active2 Plugin (prior to version 2.2.08.22012751). Issue: Information exposure through logs allowing attackers to access password information for connected WiFi AP. Root cause: logging of sensitive WiFi credentials in the plugin’s log output (per connected documen...

CVE-2021-25423

The CVE-2021-25423 entry concerns Samsung Watch Active2 PlugIn before version 2.2.08.21033151, where improper log management can cause a logged Wi‑Fi password from the user’s smartphone to be leaked by attackers with log permissions. Affected component is the Watch Active2 PlugIn (Sony?) on weara...