CVE-2025-21078
- EPSS 0.03%
- Veröffentlicht 05.11.2025 05:41:00
- Zuletzt bearbeitet 07.11.2025 15:46:38
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
CVE-2025-21064
- EPSS 0.04%
- Veröffentlicht 10.10.2025 06:33:22
- Zuletzt bearbeitet 28.10.2025 15:35:55
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
CVE-2025-21062
- EPSS 0.01%
- Veröffentlicht 10.10.2025 06:33:20
- Zuletzt bearbeitet 28.10.2025 15:39:51
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
CVE-2025-21061
- EPSS 0.01%
- Veröffentlicht 10.10.2025 06:33:19
- Zuletzt bearbeitet 28.10.2025 15:40:58
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.
CVE-2025-21060
- EPSS 0.01%
- Veröffentlicht 10.10.2025 06:33:18
- Zuletzt bearbeitet 28.10.2025 15:41:26
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
- EPSS 0.01%
- Veröffentlicht 04.06.2025 04:56:27
- Zuletzt bearbeitet 28.10.2025 18:54:52
Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability.