7.8
High
CVE-2025-21062 Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to…
Description
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Smart Switch 3.7 | earliest → < 3.7.67.2 | 3.7.67.2 |
Other CVEs of Smart Switch
The 20 CVEs of Smart Switch →
CVE-2026-21138
Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to…
6.9
Medium
CVE-2026-21137
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch…
5.1
Medium
CVE-2026-21136
Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore…
6.8
Medium
CVE-2026-21083
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data
6.8
Medium