EUVD-2026-12313Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.
AnalysisAI
Samsung Smart Switch versions prior to 3.7.69.15 contain an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent security controls. This vulnerability could enable attackers to gain unauthorized access to the application without valid credentials. No patch is currently available for this high-severity issue.
Technical ContextAI
Smart Switch is Samsung's data transfer and backup software used to migrate content between mobile devices and computers. The vulnerability stems from improper authentication implementation, though no specific CWE classification was provided. Without a CWE mapping, the exact authentication bypass mechanism remains unclear, but common patterns include missing authentication checks, weak session management, or flawed credential validation. The network-based attack vector (AV:N) indicates the vulnerability can be exploited remotely over the network without requiring local access to the affected system.
RemediationAI
Update Samsung Smart Switch to version 3.7.69.15 or later immediately to address this authentication bypass vulnerability. The patch is available through Samsung's official Smart Switch download page or through automatic updates within the application. Until patching is complete, users should avoid using Smart Switch on untrusted networks and be cautious of any unexpected authentication prompts or behaviors when using the application. Given the user interaction requirement for exploitation, maintaining awareness during Smart Switch sessions provides an additional layer of protection.
More in Smart Switch
View allSmart Switch versions prior to 3.7.69.15 contain a replay attack vulnerability in the authentication mechanism that allo
A cryptographic downgrade vulnerability in Samsung Smart Switch allows remote attackers to force the application to use
A path traversal vulnerability in Smart Switch (CVSS 7.1) that allows adjacent attackers. High severity vulnerability re
Unencrypted data transmission in Samsung Smart Switch prior to version 3.7.72.6 exposes sensitive personal data to inter
Cleartext storage of sensitive information in Samsung Smart Switch prior to version 3.7.72.6 exposes device migration da
Smart Switch versions prior to 3.7.69.15 contain an improper authentication vulnerability that allows adjacent network a
Samsung Smart Switch prior to version 3.7.72.6 exposes sensitive user data to adjacent network attackers through imprope
Smart Switch versions prior to 3.7.69.15 contain an exposure of sensitive functionality vulnerability that allows remote
Smart Switch prior to version 3.7.69.15 contains an improper cryptographic signature verification vulnerability that all
A security vulnerability in Smart Switch installed on non-Samsung Device (CVSS 5.0) that allows local attackers. Remedia
Device identity spoofing in Samsung Smart Switch's trouble scanning mode allows adjacent network attackers to impersonat
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to a
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today