What is the CVSS score of CVE-2025-20998?

CVE-2025-20998 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Wear Os are affected by CVE-2025-20998?

Organizations using SamsungAccount for Galaxy Watch should be aware of moderate risk from CVE-2025-20998 rated CVSS 5.5. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-20998?

Within 30 days: Identify affected systems running SamsungAccount for Galaxy Watch and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Wear Os CVE-2025-20998

EUVD-2025-20450 MEDIUM

2025-07-08 mobile.security@samsung.com

Information Disclosure Wear Os Samsung

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20450

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

CVE Published

Jul 08, 2025 - 11:15 nvd

MEDIUM 5.5

DescriptionCVE.org

Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number.

AnalysisAI

A security vulnerability in SamsungAccount for Galaxy Watch (CVSS 5.5) that allows local attackers. Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects SamsungAccount for Galaxy Watch.

RemediationAI

Monitor vendor channels for patch availability.

More in Wear Os

View all

CVE-2025-20946 HIGH This Week

8.8 Apr 08

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prio

CVE-2025-20984 MEDIUM This Month

6.8 Jun 04

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to

CVE-2025-20912 MEDIUM This Month

6.2 Mar 06

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data withi

CVE-2025-20910 MEDIUM This Month

6.2 Mar 06

Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access da

CVE-2025-20997 MEDIUM This Month

6.2 Jul 08

A security vulnerability in Framework for Galaxy Watch (CVSS 6.2) that allows local attackers. Remediation should follow

CVE-2025-21004 MEDIUM This Month

6.2 Jul 08

Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allo

CVE-2025-20986 MEDIUM This Month

5.5 Jun 04

A security vulnerability in ScreenCapture for Galaxy Watch (CVSS 5.5) that allows local attackers. Remediation should fo

CVE-2024-34613 MEDIUM This Month

5.5 Aug 07

Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive infor

CVE-2025-20939 MEDIUM This Month

5.4 Apr 08

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical att

CVE-2025-20911 MEDIUM This Month

4.4 Mar 06

Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update

CVE-2025-20956 MEDIUM This Month

4.3 May 07

Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows phy

CVE-2022-24930 LOW Monitor

3.3 Mar 10

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Releas

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-20998 vulnerability details – vuln.today

Back

Wear Os CVE-2025-20998

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Wear Os

Same technique Information Disclosure

Share

External POC / Exploit Code