Skip to content
Sign in
5.0 Medium

CVE-2025-20996 Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers…

Description

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Smart Switch 3.7 earliest → < 3.7.64.10 3.7.64.10

Other CVEs of Smart Switch

The 20 CVEs of Smart Switch →
CVE-2026-21138 Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to… 6.9 Medium CVE-2026-21137 Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch… 5.1 Medium CVE-2026-21136 Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore… 6.8 Medium CVE-2026-21083 Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data 6.8 Medium
Track this CVE