Samsung Smart Switch vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Samsung Smart Switch: 16 record(s), with affected versions and fixes.cpe:2.3:a:samsung:smart_switch
CVE-2026-21083
Medium · 6.5
CWE-20 Aug 10, 2026
Improper Input Validation in Samsung Smart Switch
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21080
Medium · 6.5
CWE-312 Aug 10, 2026
Cleartext Storage of Sensitive Information in Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21079
Medium · 6.5
CWE-311 Aug 10, 2026
Missing Encryption of Sensitive Data in Samsung Smart Switch
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
CVE-2026-21078
Medium · 6.5
CWE-345 Aug 10, 2026
Insufficient Verification of Data Authenticity in Samsung Smart Switch
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
CVE-2026-21005
Medium · 6.5
CWE-22 Mar 16, 2026
Path Traversal in Samsung Smart Switch
Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.
CVE-2026-21004
Medium · 6.5
CWE-287 Mar 16, 2026
Improper Authentication in Samsung Smart Switch
Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.
CVE-2026-20999
High · 7.5
CWE-294 Mar 16, 2026
Authentication Bypass by Capture-replay in Samsung Smart Switch
Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.
CVE-2026-20998
Critical · 9.8
Mar 16, 2026
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote…
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.
CVE-2026-20997
Critical · 9.8
CWE-347 Mar 16, 2026
Improper Verification of Cryptographic Signature in Samsung Smart Switch
Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.
CVE-2026-20996
Medium · 5.3
CWE-327 Mar 16, 2026
Use of a Broken or Risky Cryptographic Algorithm in Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.
CVE-2026-20995
Medium · 5.3
CWE-306 Mar 16, 2026
Missing Authentication for Critical Function in Samsung Smart Switch
Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.
CVE-2025-21078
Medium · 6.5
Nov 5, 2025
Use of insufficiently random value of secretKey in Smart Switch prior to version…
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
CVE-2025-21064
Medium · 6.5
Oct 10, 2025
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent…
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
CVE-2025-21062
High · 7.8
CWE-327 Oct 10, 2025
Use of a Broken or Risky Cryptographic Algorithm in Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
CVE-2025-21061
Medium · 5.5
CWE-312 Oct 10, 2025
Cleartext Storage of Sensitive Information in Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.
CVE-2025-21060
Medium · 5.5
CWE-312 Oct 10, 2025
Cleartext Storage of Sensitive Information in Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.