CVE-2025-21060

Medium CVSS: 5.5

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.

Vendor

Samsung

Product

Smart Switch

CWE

CWE-312

Yayın Tarihi

2025-10-10 07:15:41

Güncelleme

2025-10-28 15:41:26

Source Identifier

mobile.security@samsung.com

KEV Date Added

Kategoriler

CWE-312 Smart Switch MEDIUM Samsung 2025

Referanslar

https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10

Benzer Kayıtlar

High

CVE-2026-21000

Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store…

Medium

CVE-2026-21001

Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privileg…

Medium

CVE-2026-21002

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to inst…

Medium

CVE-2026-21004

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of serv…

High

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Sm…

Medium

CVE-2026-20992

Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the back…