VULNERABILITY INTELLIGENCE

CVE-2025-20911

CVSS score4.4 MEDIUM

EPSS probability0.14%

CISA KEVNot currently listed

Published2025-03-06

Last modified2026-06-17

Description

Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.