CVE-2025-21078: High severity Smart Switch Smart Switch vulnerability
Published Nov 5, 2025
·Updated
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.
Affected Software
2 affected components
Smart Switch Smart Switch<3.7.68.6
Samsung Smart Switch<3.7.68.6
Event History
Nov 5, 2025
CVE Published
via MITRE·05:41 AM
Data Sourced
via MITRE·05:41 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21078?
CVE-2025-21078 is considered a medium severity vulnerability due to the potential exposure of backup data.
2
How do I fix CVE-2025-21078?
To fix CVE-2025-21078, upgrade Smart Switch to version 3.7.68.6 or later.
3
What type of attacks does CVE-2025-21078 allow?
CVE-2025-21078 allows adjacent attackers to access backup data by exploiting insufficient randomness in secretKey.
4
What versions of Smart Switch are affected by CVE-2025-21078?
CVE-2025-21078 affects Smart Switch versions prior to 3.7.68.6.
5
Is my personal data at risk due to CVE-2025-21078?
Yes, CVE-2025-21078 could potentially put your personal backup data at risk if your device runs an affected version.