Zetlyn
GitHubGet started

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from appli…

cve CVE-2025-21060 1 source, 1 claim · Watch

NVD writes:
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability. the claim
Severity
MEDIUM NVD
CVSS
5.5 NVD
Vendor
Samsung Mobile NVD
Product
Smart Switch NVD
CWE
CWE-312 NVD

How far exploitation has got

  1. No public code known
  2. Proof of concept
  3. Proof of concept, verified
  4. A Metasploit module
  5. Exploited in the wild
  6. Used in ransomware campaigns

Timeline

2025-10-10first spoke of it: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.NVD

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.

What it is to other things

affectssamsung/smart_switch
NVD
made_bysamsung
NVD

In words only, so not counted until a person confirms one:

made_bysamsung_mobile
NVD says “Samsung Mobile”
affectssamsung_mobile/smart_switch
NVD says “Samsung Mobile · Smart Switch”
Every value, with what each source said and its receipt
PropertySourceSaidMeans here
Automatable
automatable
NVDno
At least one of those steps needs a person.
receipt
Source
NVD
Its words
no
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCno
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
CVSS
cvss
NVD5.5
receipt
Source
NVD
Its words
5.5
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
CVSS vector
cvss_vector
NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
receipt
Source
NVD
Its words
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
CWE
cwe
NVDCWE-312
receipt
Source
NVD
Its words
CWE-312
Read by
field:cve.weaknesses[].description[].value
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCCWE-312
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
Exploitation
exploitation
NVDnone
No evidence of exploitation, and no public proof of concept.
receipt
Source
NVD
Its words
none
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCnone
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
Product
product
NVDSmart Switch
receipt
Source
NVD
Its words
Smart Switch
Read by
field:cve.affected[].affectedData[].product
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
Severity
severity
NVDMEDIUM
From 4.0 to 6.9.
receipt
Source
NVD
Its words
MEDIUM
Read by
field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCMEDIUM
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
medium
Status
status
NVDAnalyzed
receipt
Source
NVD
Its words
Analyzed
Read by
field:cve.vulnStatus
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
Technical impact
technical_impact
NVDpartial
The attacker gains limited control, or limited information.
receipt
Source
NVD
Its words
partial
Read by
field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since
2026-10-06 11:54 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
2026-10-06 11:54 UTCpartial
2026-10-02 12:00 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
Vendor
vendor
NVDSamsung Mobile
receipt
Source
NVD
Its words
Samsung Mobile
Read by
field:cve.affected[].affectedData[].vendor
Said since
2026-10-02 12:00 UTC
Last answered
2026-10-06 12:41 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "defaultStatus": "affected",
            "product": "Smart Switch",
            "vendor": "Samsung Mobile",
            "versions": [
              {
                "status": "unaffected",
                "version": "3.7.67.2"
              }
            ]
          }
        ],
        "source": "mobile.security@samsung.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:samsung:smart_switch:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "5D27227C-CA20-479D-9B1F-F0591FEFA6AC",
                "versionEndExcluding": "3.7.67.2",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability."
      },
      {
        "lang": "es",
        "value": "Almacenamiento en texto claro de información sensible en Smart Switch anterior a la versión 3.7.67.2 permite a atacantes locales acceder a datos de respaldo de aplicaciones. Se requiere interacción del usuario para activar esta vulnerabilidad."
      }
    ],
    "id": "CVE-2025-21060",
    "lastModified": "2026-09-30T23:10:00.237",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6,
          "source": "mobile.security@samsung.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-21060",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-10-10T17:06:20.544579Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-10-10T07:15:41.973",
    "references": [
      {
        "source": "mobile.security@samsung.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10"
      }
    ],
    "sourceIdentifier": "mobile.security@samsung.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-312"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  }
}
—
Every claim, by kind

vulnerability

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
zetlyn/cve-nvd · 2025-10-10
automatable no cvss 5.5 cvss_vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N cwe CWE-312 exploitation none product Smart Switch severity MEDIUM status Analyzed technical_impact partial vendor Samsung Mobile source