CVE-2022-39889: Samsung GALAXYWATCH4PLUGIN

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information.

Affected products

• Samsung GALAXYWATCH4PLUGIN: before 2.2.11.22101351 (fixed in 2.2.11.22101351); version 2.2.11.22102751 only

Published 2022-11-09. Last modified 2026-06-17.