CVE-2025-21064
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
Risk Assessment
An attacker in close proximity could intercept data transmitted through the switch, potentially leading to disclosure of sensitive information.
Recommendation
Update Smart Switch to version 3.7.66.6 or later, and enable strong authentication and encryption mechanisms.
Other vulnerabilities in Smart Switch
See all- CVE-2026-21083Medium
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
- CVE-2026-21080Medium
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
- CVE-2026-21079Medium
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
- CVE-2026-21078Medium
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
- CVE-2025-21060Medium
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
Original NVD description (English source)
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS