Critical severity9.8NVD Advisory· Published Jan 22, 2020· Updated Jun 17, 2026

CVE-2018-16272

Description

The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interface, due to the lack of its D-Bus security policy configurations. This affects Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

Affected products

Samsung/Galaxy Gear seriesdescription
Samsung Pay/Samsung Payllm-fuzzy
Range: < RE2
Samsung Mobile/Galaxy Gear Firmware
cpe:2.3:o:samsung:galaxy_gear_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear 2 Firmware
cpe:2.3:o:samsung:gear_2_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Live Firmware
cpe:2.3:o:samsung:gear_live_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear S Firmware
cpe:2.3:o:samsung:gear_s_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear S2 Firmware
cpe:2.3:o:samsung:gear_s2_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear S3 Firmware
cpe:2.3:o:samsung:gear_s3_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Sport Firmware
cpe:2.3:o:samsung:gear_sport_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Fit Firmware
cpe:2.3:o:samsung:gear_fit_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Fit 2 Firmware
cpe:2.3:o:samsung:gear_fit_2_firmware:*:*:*:*:*:*:*:*
Range: <re2
Samsung Mobile/Gear Fit 2 Pro Firmware
cpe:2.3:o:samsung:gear_fit_2_pro_firmware:*:*:*:*:*:*:*:*
Range: <re2

Patches

Vulnerability mechanics

References

media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdfnvdExploitThird Party Advisory
www.youtube.com/watchnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000