Smart Switch (Samsung Mobile) - vulnerabilities (CVEs)
20 CVEs, 3 in the last 30 days, 2 known versions, newest CVE from 2026-10-12. Vendor: Samsung Mobile.
CVEs of Smart Switch
- CVE-2026-21138 - CVSS 6.9 (medium), 2026-10-12: Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.
- CVE-2026-21137 - CVSS 5.1 (medium), 2026-10-12: Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.
- CVE-2026-21136 - CVSS 6.8 (medium), 2026-10-12: Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.
- CVE-2026-21083 - CVSS 6.8 (medium), 2026-08-10: Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
- CVE-2026-21080 - CVSS 6.9 (medium), 2026-08-10: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
- CVE-2026-21079 - CVSS 7 (high), 2026-08-10: Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
- CVE-2026-21078 - CVSS 6.5 (medium), 2026-08-10: Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device…
- CVE-2026-21005 - CVSS 7.1 (high), 2026-03-16: Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.
- CVE-2026-21004 - CVSS 6.9 (medium), 2026-03-16: Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.
- CVE-2026-20995 - CVSS 5.3 (medium), 2026-03-16: Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.
- CVE-2026-20998 - CVSS 9.8 (critical), 2026-03-16: Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.
- CVE-2026-20997 - CVSS 9.8 (critical), 2026-03-16: Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.
- CVE-2026-20996 - CVSS 7.1 (high), 2026-03-16: Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for…
- CVE-2026-20999 - CVSS 7.5 (high), 2026-03-16: Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.
- CVE-2025-21078 - CVSS 8.8 (high), 2025-11-05: Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
- CVE-2025-21062 - CVSS 7.8 (high), 2025-10-10: Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User…
- CVE-2025-21061 - CVSS 7.1 (high), 2025-10-10: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is…
- CVE-2025-21064 - CVSS 8.8 (high), 2025-10-10: Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
- CVE-2025-21060 - CVSS 5.5 (medium), 2025-10-10: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User…
- CVE-2025-20996 - CVSS 5 (medium), 2025-06-04: Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of…
