CVE-2025-20996

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of…

Medium · published June 4, 2025

CVSS v3.1
5.0
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.5th percentile
Published
2025-06-04T04:56Z
EPSS history
Timeline
  • 04 JUN 04:56Z
    Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of…
    cvelistv5