PT-2025-41520 · Samsung · Smart Switch Pc

Florian Draschbacher · CVE-2025-21060 · Published 2025-10-10 · Updated 2025-10-10

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2

Description A flaw exists in Smart Switch that allows local attackers to access backup data from applications due to the cleartext storage of sensitive information. User interaction is required to trigger this issue.

Recommendations Update Smart Switch to version 3.7.67.2 or later.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-21060

Affected Products

Smart Switch Pc

References · 5

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21060 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21060 · Vendor Advisory
• https://t.me/cveNotify/138111 · Telegram Post
• https://twitter.com/CVEnew/status/1976547092060414163 · Twitter Post