CVE-2026-21138: Medium severity Samsung Smart Switch vulnerability
Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Smart Switchto a version that resolves this vulnerability.Fixed in 3.7.73
Event History
Frequently Asked Questions
Who is realistically exposed to exploitation?
Devices using Samsung Smart Switch versions earlier than 3.7.73 are exposed when an attacker has physical access. The vulnerability does not require prior privileges or user interaction according to the provided CVSS vector.
What does an attacker need to exploit this issue?
An attacker needs physical access to the affected environment. Exploitation is rated low complexity and can result in installation of arbitrary applications.
How can I determine whether I am affected?
Check the installed Samsung Smart Switch version. Versions prior to 3.7.73 are affected; version 3.7.73 or later is not identified as affected by the provided information.