CVE Vulnerabilities

CVE-2025-21060

Cleartext Storage of Sensitive Information

Published: Oct 10, 2025 | Modified: Oct 28, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.

Weakness

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Affected Software

Name Vendor Start Version End Version
Smart_switch Samsung * 3.7.67.2 (excluding)

Potential Mitigations

References