CVE-2025-21064

CVE-2025-21064

High · published October 10, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00265 · 17.5th percentile
Published
2025-10-10T11:15Z
Affected products (1)
ProductVersionsFixed in
samsung/smart_switch< 3.7.67.23.7.67.2
References (1)
https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10 · [email protected]
EPSS history
Timeline
  • 10 OCT 06:33Z
    Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data
    cvelistv5