medium5.0
CVE-2025-20996
Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Sma…
Impact
Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Smart Switch | before 3.7.64.10 |