Vulnerabilidades do Samsung Smart Switch
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Samsung Smart Switch: 16 registro(s), com versões afetadas e correções.cpe:2.3:a:samsung:smart_switch
CVE-2026-21083
Média · 6.5
CWE-20 10/08/2026
Improper Input Validation em Samsung Smart Switch
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21080
Média · 6.5
CWE-312 10/08/2026
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21079
Média · 6.5
CWE-311 10/08/2026
Missing Encryption of Sensitive Data em Samsung Smart Switch
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
CVE-2026-21078
Média · 6.5
CWE-345 10/08/2026
Insufficient Verification of Data Authenticity em Samsung Smart Switch
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
CVE-2026-21005
Média · 6.5
CWE-22 16/03/2026
Path Traversal em Samsung Smart Switch
Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.
CVE-2026-21004
Média · 6.5
CWE-287 16/03/2026
Improper Authentication em Samsung Smart Switch
Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.
CVE-2026-20999
Alta · 7.5
CWE-294 16/03/2026
Authentication Bypass by Capture-replay em Samsung Smart Switch
Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.
CVE-2026-20998
Crítica · 9.8
16/03/2026
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote…
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.
CVE-2026-20997
Crítica · 9.8
CWE-347 16/03/2026
Improper Verification of Cryptographic Signature em Samsung Smart Switch
Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.
CVE-2026-20996
Média · 5.3
CWE-327 16/03/2026
Use of a Broken or Risky Cryptographic Algorithm em Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.
CVE-2026-20995
Média · 5.3
CWE-306 16/03/2026
Missing Authentication for Critical Function em Samsung Smart Switch
Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.
CVE-2025-21078
Média · 6.5
05/11/2025
Use of insufficiently random value of secretKey in Smart Switch prior to version…
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
CVE-2025-21064
Média · 6.5
10/10/2025
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent…
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
CVE-2025-21062
Alta · 7.8
CWE-327 10/10/2025
Use of a Broken or Risky Cryptographic Algorithm em Samsung Smart Switch
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
CVE-2025-21061
Média · 5.5
CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability.
CVE-2025-21060
Média · 5.5
CWE-312 10/10/2025
Cleartext Storage of Sensitive Information em Samsung Smart Switch
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.