CVE-2025-21078

published 2025-11-05

CVE-2025-21078: Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.

medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C H I N A N

Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
samsung	smart_switch	< 3.7.68.6	3.7.68.6