This page lists publicly disclosed CVE vulnerabilities affecting samsung smart_switch (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-21005 | Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. | [email protected] | 7.1 | 0.02% | 2026-03-16 | 2026-03-31 |
| CVE-2026-21004 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service. | [email protected] | 6.9 | 0.05% | 2026-03-16 | 2026-03-31 |
| CVE-2026-20999 | Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions. | [email protected] | 7.1 | 0.16% | 2026-03-16 | 2026-03-31 |
| CVE-2026-20998 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication. | [email protected] | 7.1 | 0.27% | 2026-03-16 | 2026-03-31 |
| CVE-2026-20997 | Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication. | [email protected] | 5.3 | 0.13% | 2026-03-16 | 2026-03-31 |
| CVE-2026-20996 | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication. | [email protected] | 7.1 | 0.05% | 2026-03-16 | 2026-03-31 |
| CVE-2026-20995 | Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration. | [email protected] | 5.3 | 0.06% | 2026-03-16 | 2026-03-31 |
| CVE-2025-21078 | Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications. | [email protected] | 8.8 | 0.02% | 2025-11-05 | 2025-11-07 |
| CVE-2025-21064 | Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data. | [email protected] | 8.8 | 0.03% | 2025-10-10 | 2025-10-28 |
| CVE-2025-21062 | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability. | [email protected] | 7.8 | 0.01% | 2025-10-10 | 2025-10-28 |
| CVE-2025-21061 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability. | [email protected] | 7.1 | 0.01% | 2025-10-10 | 2025-10-28 |
| CVE-2025-21060 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability. | [email protected] | 5.5 | 0.01% | 2025-10-10 | 2025-10-28 |
| CVE-2025-20996 | Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability. | [email protected] | 5.0 | 0.01% | 2025-06-04 | 2025-10-28 |