CVE-2026-20997

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication

Medium · published March 16, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00266 · 17.5th percentile
Published
2026-03-16T04:32Z
EPSS history
Timeline
  • 16 MAR 04:32Z
    Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication
    cvelistv5