CVE-2025-21060
published 2025-10-10CVE-2025-21060: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User…
PriorityP422medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
0.10%
0.9th percentile
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | smart_switch | < 3.7.67.2 | 3.7.67.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Samsung Smart Switch 3.7.64.10 cleartext storage
vuldb·2026-10-03·CVSS 5.5
CVE-2025-21060 [MEDIUM] Samsung Smart Switch 3.7.64.10 cleartext storage
A vulnerability classified as problematic was found in Samsung Smart Switch 3.7.64.10. Impacted is an unknown function. Executing a manipulation can lead to cleartext storage of sensitive information.
This vulnerability appears as CVE-2025-21060. The attack requires local access. There is no available exploit.
Upgrading the affected component is advised.
GHSA
GHSA-5pvg-8r46-4jqj: Cleartext storage of sensitive information in Smart Switch prior to version 3
ghsa_unreviewed·2025-10-10
CVE-2025-21060 [MEDIUM] CWE-312 GHSA-5pvg-8r46-4jqj: Cleartext storage of sensitive information in Smart Switch prior to version 3
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-10
Published