CVE-2025-21061
BaseFortify
Publication date: 2025-10-10
Last updated on: 2025-10-28
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | smart_switch | to 3.7.67.2 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-312 | The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the cleartext storage of sensitive information in Smart Switch versions prior to 3.7.67.2. It allows local attackers to access sensitive data stored without encryption. Exploitation requires user interaction to trigger the vulnerability.
How can this vulnerability impact me? :
An attacker with local access could obtain sensitive information stored in cleartext, potentially leading to data exposure. This could result in loss of confidentiality and availability of data on the affected device.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update Smart Switch to version 3.7.67.2 or later to prevent cleartext storage of sensitive information. Additionally, restrict local access to the system to trusted users only, as the vulnerability requires local attacker access and user interaction.