What is the CVSS score of CVE-2025-20911?

CVE-2025-20911 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Wear Os are affected by CVE-2025-20911?

Organizations using sem_wifi service should be aware of moderate risk from CVE-2025-20911 rated CVSS 4.4. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-20911?

Within 30 days: Identify affected systems running sem_wifi service and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Wear Os CVE-2025-20911

MEDIUM

2025-03-06 mobile.security@samsung.com

Information Disclosure Wear Os

4.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:30 vuln.today

CVE Published

Mar 06, 2025 - 05:15 nvd

MEDIUM 4.4

DescriptionCVE.org

Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.

AnalysisAI

Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch. Affected products include: Samsung Wear Os.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Wear Os

View all

CVE-2025-20946 HIGH This Week

8.8 Apr 08

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prio

CVE-2025-20984 MEDIUM This Month

6.8 Jun 04

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to

CVE-2025-20912 MEDIUM This Month

6.2 Mar 06

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data withi

CVE-2025-20910 MEDIUM This Month

6.2 Mar 06

Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access da

CVE-2025-20997 MEDIUM This Month

6.2 Jul 08

A security vulnerability in Framework for Galaxy Watch (CVSS 6.2) that allows local attackers. Remediation should follow

CVE-2025-21004 MEDIUM This Month

6.2 Jul 08

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allo

CVE-2025-20986 MEDIUM This Month

5.5 Jun 04

A security vulnerability in ScreenCapture for Galaxy Watch (CVSS 5.5) that allows local attackers. Remediation should fo

CVE-2025-20998 MEDIUM This Month

5.5 Jul 08

A security vulnerability in SamsungAccount for Galaxy Watch (CVSS 5.5) that allows local attackers. Remediation should f

CVE-2024-34613 MEDIUM This Month

5.5 Aug 07

Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive infor

CVE-2025-20939 MEDIUM This Month

5.4 Apr 08

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical att

CVE-2025-20956 MEDIUM This Month

4.3 May 07

Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows phy

CVE-2022-24930 LOW Monitor

3.3 Mar 10

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Releas

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-20911 vulnerability details – vuln.today

Back

Wear Os CVE-2025-20911

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Wear Os

Same technique Information Disclosure

Share

External POC / Exploit Code