CVE-2026-21078

Analyzed Analyzed - Analysis Complete

Insufficient Data Verification in Smart Switch Firmware

Publication date: 2026-08-10

Last updated on: 2026-08-19

Assigner: Samsung Mobile

Description

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-19

Generated

2026-08-30

AI Q&A

2026-08-10

EPSS Evaluated

2026-08-29

NVD

CVE-2026-21078

EUVD

EUVD-2026-55103

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	smart_switch	to 3.7.72.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-345	The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

Executive Summary

This vulnerability involves insufficient verification of data authenticity in Smart Switch's trouble scanning mode before version 3.7.72.6. An attacker within close proximity can spoof a device's identity to exploit this flaw.

Detection Guidance

This vulnerability involves insufficient verification of data authenticity in Smart Switch trouble scanning mode. Detection requires checking for unauthorized device identity spoofing in network traffic. Monitor for unexpected device advertisements or responses in the local network segment. Verify all connected devices are running Smart Switch version 3.7.72.6 or later.

Impact Analysis

An attacker could impersonate a legitimate device during troubleshooting, potentially intercepting or manipulating data transfers. This may lead to unauthorized access or data breaches if exploited.

Compliance Impact

This vulnerability could violate data integrity and confidentiality requirements in GDPR and HIPAA. Unauthorized access or data spoofing may lead to non-compliance with these regulations.

Mitigation Strategies

Update Smart Switch to version 3.7.72.6 or later to address insufficient data authenticity verification in trouble scanning mode.

Hi! I’m here to help you understand CVE-2026-21078. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70