PT-2025-41521 · Samsung · Smart Switch Pc

Florian Draschbacher · Published 2025-10-10 · Updated 2025-10-15 · CVE-2025-21061

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2

Description The software stores sensitive information in cleartext, potentially allowing local attackers to access this data. User interaction is required to trigger this issue. The vulnerability affects devices where an attacker has local access.

Recommendations Update Smart Switch to version 3.7.67.2 or later.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-21061

Affected Products

Smart Switch Pc

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-21061 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21061 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1976609813166477809 · Twitter Post
• https://twitter.com/CVEnew/status/1976547091112509675 · Twitter Post
• https://t.me/cveNotify/138112 · Telegram Post
• https://twitter.com/CveTodo/status/1976555380328051144 · Twitter Post
• https://twitter.com/cracbot/status/1978415596208554382 · Twitter Post