CVE-2025-21060: Medium severity Samsung Smart Switch vulnerability
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Smart Switchto a version that resolves this vulnerability.Fixed in 3.7.67.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21060?
CVE-2025-21060 is considered a moderate severity vulnerability due to the potential exposure of sensitive data.
How do I fix CVE-2025-21060?
To fix CVE-2025-21060, update Samsung Smart Switch to version 3.7.67.2 or later.
Who is affected by CVE-2025-21060?
Users of Samsung Smart Switch prior to version 3.7.67.2 are affected by CVE-2025-21060.
What type of data is vulnerable in CVE-2025-21060?
CVE-2025-21060 exposes backup data from applications, which may contain sensitive user information.
Is user interaction required to exploit CVE-2025-21060?
Yes, user interaction is required to trigger the CVE-2025-21060 vulnerability.