8.8
CVE-2025-21078
- EPSS 0.02%
- Veröffentlicht 05.11.2025 05:41:00
- Zuletzt bearbeitet 07.11.2025 15:46:38
- Quelle mobile.security@samsung.com
- CVE-Watchlists
- Unerledigt
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ Smart Switch Version < 3.7.68.6
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.06 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| mobile.security@samsung.com | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|