CVE-2025-53649CWE-532

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12

Medium · published July 29, 2025

CVSS v4.0
5.9
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00155 · 4.2th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-07-29T04:41Z
EPSS history
Timeline
  • 29 JUL 04:41Z
    "SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12
    cvelistv5