Samsung Smart Switch vulnerabilities
17 vulnerabilities
Known vulnerabilities in Samsung Smart Switch, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-21078samsungsmart_switch
EPSS score0.23%
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.CVE-2025-21064samsungsmart_switchEPSS score0.27%
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.CVE-2025-21062samsungsmart_switchEPSS score0.10%
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.CVE-2025-21061samsungsmart_switchEPSS score0.10%
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.CVE-2025-21060samsungsmart_switchEPSS score0.10%
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.CVE-2025-20996samsungsmart_switchEPSS score0.13%
Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability.CVE-2026-21079samsungsmart_switchEPSS score0.10%
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.CVE-2026-21005samsungsmart_switchEPSS score0.25%
Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.CVE-2026-21083samsungsmart_switchEPSS score0.26%
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.CVE-2026-21004samsungsmart_switchEPSS score0.19%
Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.CVE-2026-21080samsungsmart_switchEPSS score0.17%
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.CVE-2026-21078samsungsmart_switchEPSS score0.16%
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.CVE-2026-20998samsungsmart_switchEPSS score0.57%
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.CVE-2026-20995samsungsmart_switchEPSS score0.29%
Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.CVE-2026-20999samsungsmart_switchEPSS score0.33%
Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.CVE-2026-20996samsungsmart_switchEPSS score0.17%
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.CVE-2026-20997samsungsmart_switchEPSS score0.27%
Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.