CVE-2022-36874: Samsung Galaxy Watch Plugin

Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.

Affected products

• Samsung Galaxy Watch Plugin: before 2.2.11.22040751 (fixed in 2.2.11.22040751)

Published 2022-09-09. Last modified 2026-06-17.