Improper Authorization in Smart Switch for Non-Samsung Devices
CVE-2025-20996

5MEDIUM

Key Information:

Vendor

Samsung
Status
Smart Switch
Vendor
CVE Published:
4 June 2025

What is CVE-2025-20996?

A vulnerability exists in Smart Switch installed on non-Samsung devices prior to version 3.7.64.10, where improper authorization may allow local attackers to access sensitive data with the privileges of the Smart Switch app. User interaction is necessary to exploit this vulnerability, potentially compromising user data security.

Affected Version(s)

Smart Switch 3.7.64.10

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.