Samsung Smart Switch CVE-2025-21064

Exploitation requires the attacker to be on the same adjacent network (AV:A) as the victim - e.g. shared, public, or attacker-controlled Wi-Fi - during an active Samsung Smart Switch data transfer. The limiting factors are significant: the vulnerable transfer channel must be in use at the time (a transient migration window), the attacker must have local network adjacency rather than remote internet access, and devices must run Smart Switch prior to version 3.7.66.6. No special authentication or user interaction by the attacker is required (PR:N/UI:N), but the dependence on an in-progress transfer and local positioning sharply narrows real-world opportunity. Fixed in Smart Switch 3.7.66.6.

This is a genuine but situationally-gated medium-severity issue, not a drop-everything emergency. The vendor CVSS 3.1 vector (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N = 6.5) is internally consistent with the description: an improper-authentication flaw in Samsung Smart Switch that lets an attacker on the same adjacent network access data being transferred. The AV:A (adjacent, not network) metric is the single biggest risk-limiter - the attacker must be on the same L2/local segment (e.g. same Wi-Fi) during an active device-migration session, which is why this is not remotely mass-exploitable. EPSS is low at 0.27% (17th percentile), consistent with the adjacency gate and the narrow window of exploitation. There is no CISA KEV listing and no public exploit identified at time of analysis, so this reflects latent risk rather than observed abuse. The impact is confidentiality-only (C:H, I:N, A:N) - potentially sensitive migration content (contacts, messages, files) - with no integrity or availability consequence. Net: a real priority for high-value targets on shared networks, but the combination of adjacency requirement, the need for an in-progress transfer, low EPSS, and no exploitation evidence places it below internet-facing unauthenticated RCEs. No key signals conflict; the vector and description align well.

A victim initiates a Samsung Smart Switch data migration while connected to a shared or attacker-controlled Wi-Fi network. Because of improper authentication of the transfer channel, an attacker positioned on the same adjacent network accesses the data in transit, exposing personal content such as contacts, messages, or files. No public exploit code is identified, and the attacker must be present on the local network during the active transfer window.