（CVE-2025-21023）Galaxy Watch WcsExtension组件访问控制漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-21023
• https://www.cve.org/CVERecord?id=CVE-2025-21023
• https://access.redhat.com/security/cve/cve-2025-21023
• https://github.com/advisories/GHSA-m5m5-9gmx-4cxx
• https://www.tenable.com/cve/CVE-2025-21023
• https://vulners.com/cve/CVE-2025-21023
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10
• https://cve.imfht.com/detail/CVE-2025-21023
• https://socdefenders.ai/cves/CVE-2025-21023
• https://cve.imfht.com/product/WcsExtension%20for%20Galaxy%20Watch

Related Vulnerabilities

• PoCCVE-2026-58455: Dockwatch <= 0.6.567 - OS Command Injection
• PoCCVE-2020-10532: WatchGuard Fireware AD Helper Component - Credentials Disclosure
• PoCCVE-2026-27645: Changedetection.io RSS Single Watch - Cross-Site Scripting
• PoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API
• WatchGuard Fireware OS 越界写入漏洞 可导致远程代码执行
• (CVE-2025-9242) WatchGuard Fireware OS 未授权远程代码执行漏洞
• （CVE-2025-21013）Galaxy Watch SemSensorManager访问控制漏洞导致敏感信息泄露
• （CVE-2025-21011）三星Galaxy Watch SemSensorService访问控制漏洞允许本地攻击者获取敏感传感器信息
• （CVE-2025-21012）Galaxy Watch跌倒检测功能不正确的访问控制漏洞允许本地攻击者修改配置
• ZoneMinder /zm/index.php watch SQL 注入漏洞（CVE-2024-43360）
• PoCCVE-2022-34534: Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure