EUVD-2026-55103
GHSA-42p3-wxq8-fc66
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent vector and low privileges confirmed by description and CVSS 4.0 source; scope change reflects high subsequent-system impact; required user interaction maps from UI:A; low C/I/A on vulnerable system consistent with identity-spoofing rather than direct code execution.
Primary rating from Vendor (SamsungMobile).
CVSS VectorVendor: SamsungMobile
Lifecycle Timeline
2DescriptionCVE.org
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
AnalysisAI
Device identity spoofing in Samsung Smart Switch's trouble scanning mode allows adjacent network attackers to impersonate trusted devices, potentially enabling interception or manipulation of data during device transfer sessions. All Smart Switch versions prior to 3.7.72.6 are affected, as reported by Samsung Mobile. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.
Technical ContextAI
Samsung Smart Switch (CPE: cpe:2.3:a:samsung_mobile:smart_switch) is a data migration and device management application used to transfer contacts, media, and application data between Samsung devices. The 'trouble scanning mode' is a diagnostic feature activated when connectivity or pairing problems are detected during a transfer session. The vulnerability stems from the application's failure to adequately verify the authenticity of device identity data presented during this mode, allowing a network-adjacent attacker to forge or replay identity assertions. No CWE is formally assigned, but the behavior maps conceptually to CWE-345 (Insufficient Verification of Data Authenticity) and CWE-290 (Authentication Bypass by Spoofing). The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:L/UI:A) confirms the attack is constrained to the adjacent network segment, requires low-level privileges, and depends on active user interaction to trigger the vulnerable code path.
RemediationAI
The primary fix is to update Samsung Smart Switch to version 3.7.72.6 or later, which contains Samsung Mobile's correction for the insufficient data authenticity verification. Updates are available via the application's built-in auto-update mechanism or through Samsung's official download portal; the advisory at https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08 provides authoritative guidance. As a compensating control prior to patching, avoid initiating Smart Switch sessions - particularly diagnostic or trouble scanning workflows - on untrusted network segments such as public Wi-Fi, guest VLANs, or open enterprise wireless networks, since exploitation requires adjacent network positioning. Restricting Smart Switch use to isolated, trusted wired or dedicated wireless segments substantially reduces the attack surface. Note that entirely disabling trouble scanning mode may impair connectivity diagnostics when device pairing fails, so this trade-off should be weighed against operational impact.
More in Smart Switch
View allSmart Switch versions prior to 3.7.69.15 contain a replay attack vulnerability in the authentication mechanism that allo
Samsung Smart Switch versions prior to 3.7.69.15 contain an authentication bypass vulnerability that allows unauthentica
A cryptographic downgrade vulnerability in Samsung Smart Switch allows remote attackers to force the application to use
A path traversal vulnerability in Smart Switch (CVSS 7.1) that allows adjacent attackers. High severity vulnerability re
Unencrypted data transmission in Samsung Smart Switch prior to version 3.7.72.6 exposes sensitive personal data to inter
Cleartext storage of sensitive information in Samsung Smart Switch prior to version 3.7.72.6 exposes device migration da
Smart Switch versions prior to 3.7.69.15 contain an improper authentication vulnerability that allows adjacent network a
Samsung Smart Switch prior to version 3.7.72.6 exposes sensitive user data to adjacent network attackers through imprope
Smart Switch versions prior to 3.7.69.15 contain an exposure of sensitive functionality vulnerability that allows remote
Smart Switch prior to version 3.7.69.15 contains an improper cryptographic signature verification vulnerability that all
A security vulnerability in Smart Switch installed on non-Samsung Device (CVSS 5.0) that allows local attackers. Remedia
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to a
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today